last executing test programs: 5.757535569s ago: executing program 3 (id=430): r0 = getpid() r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000140)=[{0x3, 0x0, {0x2, 0xff, 0x1}, {0x1, 0x1, 0x4}, 0x2, 0xfd}, {0x3, 0x1, {0x2, 0x1, 0x3}, {0x1, 0xf0, 0x2}, 0x1, 0xfd}, {0x1, 0x2, {0x2, 0xff}, {0x0, 0x0, 0x4}, 0xfe, 0x1}, {0x0, 0x3, {0x1, 0xf0, 0x2}, {0x2, 0x0, 0x2}, 0x2, 0xfd}], 0x80) r2 = syz_pidfd_open(r0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f00000000c0)={0x50, 0x0, r6, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000002140)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007ed10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000889049938edebcd600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000004140)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x18, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) open_by_handle_at(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="1c00000081"], 0x0) ioctl$UI_SET_FFBIT(r4, 0x4004556b, 0x3b) write(r3, &(0x7f0000000080)="47000300010003", 0x7) setns(r2, 0x24020000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="7910480000000000690030000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mount(&(0x7f00000001c0)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='nilfs2\x00', 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x40, 0x6) 2.5677717s ago: executing program 3 (id=464): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000001800090400000000000000000ab9"], 0x24}}, 0x28000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="e9ef3a9347395a889952f9c38868030f02122e75eb0db4d5dc1cb153650db2967f17035455097029f8586748f3bea1ee0a75acaf621a871cdfb729bddff2508a497bb227f06ea8aedf8e08994c8411721295aefcefe6149130840d3ac75cb9c605f4e67e5eb3240b3d7094a57a59c4", @ANYRES16=r2, @ANYRESHEX=r2, @ANYRESDEC=r2], 0x128}}, 0x81) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x10}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000300)={r7, 0x1, 0x30}, &(0x7f0000000340)=0xc) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd090032000300300000006000000001002f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120022eb"], 0xfdef) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0xf) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$TCFLSH(r9, 0x400455c8, 0x9) r10 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r10, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r11 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r11, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) ioctl$TIOCVHANGUP(r8, 0x5437, 0x0) 2.068714769s ago: executing program 2 (id=469): r0 = syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x4a141) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_io_uring_setup(0x206c, 0x0, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)}) pwritev(r0, &(0x7f0000000340), 0x0, 0x0, 0x0) 1.940111495s ago: executing program 2 (id=470): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x1, 0x0) vmsplice(r1, &(0x7f0000000400)=[{&(0x7f0000000200)='R', 0x1}], 0x1, 0x0) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100e8ffffff00000000260000002000018008000100", @ANYRES32=r4, @ANYBLOB="14000200776731"], 0x34}}, 0x0) ioctl$TCXONC(r0, 0x4b45, 0x3) 1.879980207s ago: executing program 2 (id=471): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x80, 0x4, 0x280000, 0x2, 0xb, "5438894f9e4cf87d8a4369435d767b6de7d02e"}) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40000008}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r5}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) 1.779936241s ago: executing program 2 (id=472): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x440483, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000040)={0x2, 0xc5}, 0x2) socket$inet6(0xa, 0x800, 0x664) (async) ioctl$SNDRV_PCM_IOCTL_LINK(0xffffffffffffffff, 0x40044160, &(0x7f0000000080)=0x3) r1 = socket$inet6(0xa, 0xa, 0x6) (async, rerun: 64) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x1054c1, 0x0) (rerun: 64) accept$packet(r2, 0x0, &(0x7f0000000100)) ioctl$KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f0000000140)=""/80) (async) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000) (async) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) (async) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000001c0)=0x0) timer_create(0x5, &(0x7f0000000200)={0x0, 0x20, 0x4, @tid=r3}, &(0x7f0000000240)=0x0) (async) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000280), &(0x7f00000002c0)=0x4) timer_delete(r4) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000340)={&(0x7f0000000300)=[0x0, 0x0], 0x2}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x1, 0x5, 0x8}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f00000004c0)={r5, r7, 0x0, 0x100, 0x7, 0x5, 0x7f, 0x10, 0x6, 0x6, 0x10, 0x1000}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000500)={0x0, 0x0}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000540)={0x0, 0x0, r2}) (async) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000580)={0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f00000005c0)={r6, 0x81, 0x6, 0x6, 0x1, [0x0, r8, r9, r10], [0x9, 0xc181, 0x2abf, 0x6], [0x834, 0x9, 0xff, 0x6], [0x4, 0x20eaf054, 0x7, 0x720]}) socket$igmp6(0xa, 0x3, 0x2) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) (async) write$uinput_user_dev(r2, &(0x7f0000000680)={'syz1\x00', {0x2, 0x0, 0x9, 0x7ff}, 0x4, [0x7, 0x4, 0x2, 0x2, 0x2, 0x3, 0x4, 0x800, 0x3, 0x9, 0x400, 0x5d74, 0x3, 0x8, 0x1, 0x8, 0xfffffffd, 0x1, 0x7, 0x3, 0x9, 0x6, 0x8000000, 0x1, 0x7, 0xffffffff, 0x7ff, 0xf, 0x5, 0x5, 0x6, 0xff, 0xde2, 0x1fffe, 0x4da, 0x0, 0xfffff8fd, 0x13, 0xfffffffe, 0x4, 0x14, 0x1, 0xf810, 0x9, 0x7, 0xb83, 0x8, 0x1, 0x10001, 0xf, 0x4, 0x4, 0x10, 0x1, 0x62, 0x126b4000, 0x101, 0x889f, 0x10001, 0x40000, 0xbfec, 0x9, 0x6, 0x9], [0x6f3e, 0x2, 0x3, 0x1, 0x3280000, 0x480, 0x2, 0x7, 0x7, 0x8, 0x8, 0x2, 0x10, 0x1af, 0x101, 0x78c7, 0x1ff, 0x10000, 0x401, 0x2, 0x8, 0x9, 0xf, 0x6, 0x6, 0x3, 0x1, 0x3, 0x9, 0x83, 0x5, 0x9, 0xd993, 0x2d5, 0xffffffff, 0x7fffffff, 0x81, 0x7, 0x7, 0x2, 0x1, 0x869, 0x9, 0x4, 0x80000001, 0x7, 0x81, 0xfffffffd, 0x7fff, 0x9, 0xfffffffc, 0x3, 0x8, 0x2, 0xb, 0x80000001, 0x6, 0x335, 0x7, 0xfb8, 0x80000000, 0x6, 0x0, 0x16], [0x3, 0x7, 0xfffffff4, 0x1, 0xffffffff, 0x80000000, 0xf9, 0x2, 0x2, 0x7, 0xc50, 0x8, 0x80000000, 0x8, 0x4, 0x7fffffff, 0x0, 0xffffff97, 0xa, 0xc, 0xfffff314, 0x40, 0x6, 0xfffffffa, 0x5, 0xb, 0x1, 0x51b, 0x1, 0x80000000, 0x8, 0x21d5c113, 0x9, 0x0, 0x45e, 0x9, 0x40, 0x0, 0x69, 0xeaf, 0xb9, 0x7, 0x6, 0xfffffc01, 0x8000, 0x1, 0x9, 0x4, 0x5, 0x628d, 0x9, 0x0, 0x5, 0x2, 0x1, 0xc, 0x2, 0x400, 0x800, 0xffffff7f, 0x9, 0xffff, 0x2, 0x400], [0x5, 0xc, 0xffffff00, 0x4, 0x80000001, 0x2, 0x2, 0x3, 0x80000000, 0x5, 0x401, 0x5, 0x100, 0xff, 0x4, 0x5, 0xffffff80, 0x1ff, 0xb, 0x7, 0xfffff323, 0x96fd, 0x4, 0x40, 0x1, 0xe11, 0xffffffff, 0x0, 0x2, 0x2, 0x225, 0xe, 0x1251, 0x1, 0x101, 0x2460d24a, 0x3, 0x9b, 0x12a, 0x3, 0x400, 0x3ff, 0x80000000, 0x1, 0x5, 0xa, 0x8001, 0x2, 0x5, 0x5, 0xbae3, 0x1, 0x6, 0x0, 0x80000001, 0x1, 0x1ff, 0x8, 0x9, 0xfffffffc, 0x3, 0x1, 0x4, 0x2a]}, 0x45c) getresuid(&(0x7f0000000b80), &(0x7f0000000bc0), &(0x7f0000000c00)=0x0) (async) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000c40)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@empty}}, &(0x7f0000000d40)=0xe8) (async) stat(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x1, &(0x7f0000000e40)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r11}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@default_permissions}, {@blksize={'blksize', 0x3d, 0x800}}, {@blksize={'blksize', 0x3d, 0x1e00}}], [{@permit_directio}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@subj_role={'subj_role', 0x3d, '/dev/userio\x00'}}, {@uid_eq={'uid', 0x3d, r13}}, {@smackfstransmute={'smackfstransmute', 0x3d, '*\xbd\\.}\xd0{[&[&&{'}}, {@euid_gt={'euid>', r14}}, {@fsmagic={'fsmagic', 0x3d, 0x5}}]}}) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000fc0)={r12, 0x1, 0x6, @remote}, 0x10) (async) ioctl$SNDCTL_SEQ_THRESHOLD(r2, 0x4004510d, &(0x7f0000001000)=0x5) 1.778998917s ago: executing program 2 (id=473): syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x183000) r1 = socket(0x10, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a1) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc020000000000000000000000000000040012"], 0x8c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@deltclass={0x58, 0x29, 0x800, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xfff3}, {0x2, 0xfff1}, {0xb, 0xffe0}}, [@tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0x5, 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r5 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000200)={0xf010000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}}, 0x24}}, 0x4000) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4048aecb, &(0x7f0000000240)={0x7, 0x0, [{0x7, 0xffffffff, 0x1, 0x7, 0x6, 0x6, 0x2}, {0x80000007, 0x4, 0x0, 0x8001, 0x27, 0x7, 0x7f}, {0x40000001, 0x8, 0x0, 0x3, 0x7fffffff, 0x5, 0xffff}, {0xb, 0xe5f, 0x1, 0x7, 0xdf4, 0x6, 0x7fffffff}, {0x0, 0x201, 0x5, 0x6, 0x80000000, 0x0, 0xffffffff}, {0xd, 0x2bb, 0x1, 0xd, 0x3, 0x7ff, 0x400}, {0x80000008, 0x3ff, 0x0, 0xf9, 0xffffa15c, 0xa524, 0x7}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) r10 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) io_uring_enter(r10, 0x8000, 0x4439, 0x4, &(0x7f0000000040)={[0x7]}, 0x8) mprotect(&(0x7f000032c000/0x1000)=nil, 0x1000, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000180)={0x0, 0x8, 0x0, 0x5, "d88fd87f1ad6eeb75a957fe0213b2e100af028f0030b2eff0b61e6e66b8f37ff"}) 1.590045639s ago: executing program 0 (id=476): socket(0x18, 0xa, 0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000007000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000001180)) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r6, 0x29, 0xd1, &(0x7f0000000140)=0x9, 0x4) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000080)) ioctl$SG_EMULATED_HOST(r7, 0x2203, &(0x7f0000000040)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000080000000000000000000a1400000010"], 0x28}}, 0x0) sendmsg$can_bcm(r5, &(0x7f00000005c0)={&(0x7f0000000180)={0x1d, r4}, 0x10, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="04000000000000000000010000000000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=r5, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x38}, 0x2}, 0x0) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r2, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r2, &(0x7f0000000180)) poll(&(0x7f00000001c0)=[{r2, 0x1000}], 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000900)={'wlan1\x00'}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRESOCT, @ANYBLOB="d1bd2bbd7000fedbdf256300000008000300", @ANYBLOB="5f3527eaea7794111db064c5306138dd94c2b345a218d8abbf886c9398021b1be419112169a0347eb420451c127a7488ab47de5408c3bb3a564062a9242d0fb46f4a5a34198e5c2ca81356f99a9bc46d40c8f95ba9216a0c006a5623233ed91670822c08ec28d5be32532e4fb2c0cca34bcf752dbbcf076c13f3f6e9e0652c85389f71f4e45a13c4a9a8161a19650cc23d03b703211ffc9ffd20bcd45cde82285fea3793193e59ab77cabe07596884923b683a8b365a14607e140fd060063a084c78f0a82532fec3df4a1269273d849c160e319883b20e08a51cefc887bb26eef6c9052da398734883a7a07e6cea03cccec784933f421cf8", @ANYRES8=r4], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) syz_emit_ethernet(0x12, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0], 0x0) 1.539513275s ago: executing program 0 (id=477): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000100000000000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="020000000100"/28], 0x48) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x50002, 0x0) ioctl$SNDCTL_MIDI_INFO(r5, 0xc074510c, &(0x7f00000000c0)={"ace8cbe1ff757809a95ca475ac3ca540db4ab7ae1a139792205bcffe3e82", 0x7, 0x4491, 0x3, [0x8, 0x4, 0x5, 0x1, 0xec9f9338, 0x6, 0x2, 0x1, 0x3, 0x0, 0x6, 0x7fffffff, 0xc0d, 0x5, 0xfff, 0x8d, 0x7fff, 0xf5]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x15, &(0x7f00000006c0)={{r4}, &(0x7f0000000000), &(0x7f0000000680)}, 0x20) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfe80, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) 1.479728407s ago: executing program 0 (id=478): r0 = syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x4a141) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_io_uring_setup(0x206c, 0x0, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)}) pwritev(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0) 1.389922648s ago: executing program 0 (id=479): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="161d3bfaf0cc93ac7ff48e3a6b98e43cf6da221054bbc5f08da4cc669cccf6cabebddf97abc6ccf87da9fe596f2b2d163da1d2dd45ce753fa87986cd87369b43c344072ea6a0512f278bd68d4909f4e4f8ee5b80cc871f23d5691d1dedd48214468c140d925ca42e78c802c8bd28fac6e03662a1166e77f5dd54b01740f68b79c90d86cedb2d58c658a30bcd9c402b51cea342a38628da8a2d27f4a31bab34ec17ed3f2b9bb8e96b7f39c89e438ca85bfb10caa15df8443cc7f0413555726f"]) (async) read$FUSE(r4, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000001200)={0x50, 0x0, r5, {0x7, 0x27, 0x0, 0x500000}}, 0x50) (async) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0) (async) read$FUSE(r4, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000000200)={0x10, 0xffffffffffffffda, r6}, 0x10) (async) mmap$binder(&(0x7f0000467000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0xe7c) (async) r7 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r7, r3, 0x0) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x20, 0x0, &(0x7f0000000100), 0x24, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) dup3(r8, r1, 0x0) (async) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r10, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (async) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f0000003d80)={0xffffffffffffffff, 0x0, 0x0, 0x0, @vifc_lcl_addr=@empty, @rand_addr=0x64010102}, 0x10) setsockopt$sock_int(r10, 0x1, 0x8, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.389419764s ago: executing program 0 (id=480): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000180)={{0xa, 0x4e22, 0x2, @private1}, {0xa, 0x4e24, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0xffffffffffffffff, {[0xa, 0x8, 0x0, 0x6, 0x2, 0x200, 0x9]}}, 0x5c) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) r4 = syz_clone(0x10080411, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="040101000000000014000300766c616e30010000000000000000000008000a00", @ANYRES32=r1, @ANYBLOB], 0x3c}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x200008d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) syz_usb_connect(0x0, 0x3f, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000d5b6c108701801007fe6010203010902"], 0x0) sendto$inet6(r6, &(0x7f0000000280)="03", 0x100000, 0x0, 0x0, 0x0) r7 = accept4(r5, 0x0, 0x0, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r8, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r8, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe21, 0x0, @mcast1}, 0x1c) sendto$inet6(r8, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) sendto$inet6(r8, &(0x7f0000000100)="2501f71d330b7e73d6b1d1b8a473ff7487b4b43ce086388e5de7714fa228ee1f6848", 0x22, 0x0, 0x0, 0x0) recvfrom$inet6(r8, 0x0, 0x0, 0x2003, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, 0x20000000) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r9, 0x84, 0x20, &(0x7f0000000200), &(0x7f0000000240)=0x4) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmmsg(r7, &(0x7f000000c940)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001840)=""/4106, 0x100a}], 0x1}}], 0x1, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) 1.249751359s ago: executing program 1 (id=483): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0xaf, 0x202140) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0xfffffff8, 0x45, &(0x7f0000000000)={0x4b5a9da54893e123, 0x1, 0x10, 0x2}, 0x8, 0xa0400000, 0x0, 0x0, 0x0, 0x20000, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYRES16=r0, @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 1.18999258s ago: executing program 1 (id=484): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000056000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="2f8e0d51591fff108e87c6a4898ab293aee5d8e088ab6a08cedafa668da0b37259f751cd13ea337ad2c24c80a9813669cab37bd445f55e695fbb727dd08e35d6e3bb9629491c89834ffce6b717e88f79dd4f8ad01ddf63efac351450e340338ce659ff8b2791f2a6658fabf44410e1c558497a1f424b2c49202b780426259a6386b61a23bbedfbef9ffb49e2b10ff5b85421d01f3078089db87e29aa1e820a63149e26236e3577840e89ae7cbe838a4f1efb9826aa759597ff7ec6cb20c3619805d8076468a9abbd38b845d41a51e0c6d2fe77e3c7c2e9bf665db35d0ebf48d895d937cd13ff941adca7"], 0x28}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000056000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="2f8e0d51591fff108e87c6a4898ab293aee5d8e088ab6a08cedafa668da0b37259f751cd13ea337ad2c24c80a9813669cab37bd445f55e695fbb727dd08e35d6e3bb9629491c89834ffce6b717e88f79dd4f8ad01ddf63efac351450e340338ce659ff8b2791f2a6658fabf44410e1c558497a1f424b2c49202b780426259a6386b61a23bbedfbef9ffb49e2b10ff5b85421d01f3078089db87e29aa1e820a63149e26236e3577840e89ae7cbe838a4f1efb9826aa759597ff7ec6cb20c3619805d8076468a9abbd38b845d41a51e0c6d2fe77e3c7c2e9bf665db35d0ebf48d895d937cd13ff941adca7"], 0x28}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = dup(r2) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) read(r4, &(0x7f0000001480)=""/4096, 0x1000) (async) read(r4, &(0x7f0000001480)=""/4096, 0x1000) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="600000000206050000000000fffff00000000000050068617bf828f53e2facc301001b0000000900020063687a320000000006eb3b2f1f777919ec0007806e4959c90cc9950800124000080000080008400000000014000d00000073683a69702c706f72742c69"], 0x60}}, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r5, &(0x7f0000000800)={0x2020}, 0xffffffffffffffeb) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000100)={0x1000004, 0xb82, &(0x7f00000005c0)="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", &(0x7f0000000000)="e9c0cf3dca24b3985e5b7adcd340e6f1c079995bf7dfc9f471768e56449f7d0f116b7acd245ec10b212d0fbba3621769e307a83b43e9bd410dc55bed9bb38d64661bebf0b46b5cb2f5af6a3d02e3db9dc7b66d3456e263a02f6a66ef2304909c23e41ab41cb1f467031b68c55f89c057b5535203a91efacf7b9c0d9290283e37aaddcaa26065319c285b18e791ef228ad14d5cb0e7522403857a4636ca33d9e20da7a3d5054523cbd5409c7c0610b5fdb8", 0x214, 0xb1}) (async) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000100)={0x1000004, 0xb82, &(0x7f00000005c0)="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", &(0x7f0000000000)="e9c0cf3dca24b3985e5b7adcd340e6f1c079995bf7dfc9f471768e56449f7d0f116b7acd245ec10b212d0fbba3621769e307a83b43e9bd410dc55bed9bb38d64661bebf0b46b5cb2f5af6a3d02e3db9dc7b66d3456e263a02f6a66ef2304909c23e41ab41cb1f467031b68c55f89c057b5535203a91efacf7b9c0d9290283e37aaddcaa26065319c285b18e791ef228ad14d5cb0e7522403857a4636ca33d9e20da7a3d5054523cbd5409c7c0610b5fdb8", 0x214, 0xb1}) 439.196574ms ago: executing program 2 (id=485): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0xfffffffffffffc60, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) r2 = openat$dsp(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000180)=0x1, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000400)=0x14) r4 = shmat(0x0, &(0x7f0000ff7000/0x3000)=nil, 0x400c) shmdt(r4) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='./bus\x00', &(0x7f0000000000)='qnx6\x00', 0x0, 0x0) sendmsg$can_raw(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x1d, r3}, 0x10, &(0x7f00000004c0)={&(0x7f0000000480)=@can={{0x2, 0x0, 0x1}, 0x2, 0x2, 0x0, 0x0, "acd3bdf44f6c0347"}, 0x10}, 0x1, 0x0, 0x0, 0x4010}, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) write$FUSE_IOCTL(r6, &(0x7f0000000100)={0x20}, 0xfdef) read$FUSE(r6, &(0x7f0000000540)={0x2020}, 0x2020) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="58000000000101040000000000000000020000001c001880080001400000000008000240000000000800034000000000240001801400018008000100e00000010800020083d900010c000280058001000000000004001640"], 0x58}, 0x1, 0x0, 0x0, 0x20c08c5}, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448c9, 0x0) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) syz_emit_ethernet(0x56, &(0x7f00000001c0)=ANY=[@ANYBLOB="911b146f16da64b9f411ac43000d000000a021020000274052db52a4ac4131eb2117cf57cca8fb56895b9dd2250f0f5c6b901b7240a9009c93f75d9671d3acfc62f616d8fa42a8f9d28e33246412dd18d7fbd60eecd1"], &(0x7f0000000380)={0x1, 0x3, [0x5f5, 0x7ac, 0x8e7, 0xbd5]}) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) write(r8, &(0x7f0000000340)="07000000010000", 0x7) 438.925656ms ago: executing program 3 (id=486): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8800, &(0x7f0000000280)={'trans=unix,', {[{@directio}, {@cache_loose}, {@ignoreqv}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@appraise}]}}) mount_setattr(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x900, &(0x7f0000000240)={0x85, 0x0, 0x80000}, 0x20) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x410601, 0x0) 369.774297ms ago: executing program 3 (id=487): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000150001030038c9"], 0x14}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000020000000f10"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$netlink(0x10, 0x3, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000300)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)="fa"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=[@request_death={0x400c6313, 0x0, 0xffffff7f00000000}], 0x2, 0x1000000000000, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000150001030038c9"], 0x14}}, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000020000000f10"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) socket$netlink(0x10, 0x3, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000300)) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x0, 0x0, 0x0}) (async) dup3(r5, r4, 0x0) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)="fa"}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=[@request_death={0x400c6313, 0x0, 0xffffff7f00000000}], 0x2, 0x1000000000000, 0x0}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 319.046234ms ago: executing program 1 (id=488): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x8}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffff8}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) fcntl$dupfd(r3, 0x0, r3) (async) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000040), 0x1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map=r4, 0x20, 0x0, 0x80000a, &(0x7f00000001c0)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000100000000000100000008000300", @ANYRES32=r5], 0x1c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000100000000000100000008000300", @ANYRES32=r5], 0x1c}}, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x107842, 0x0) (async) r6 = open(&(0x7f0000000080)='./bus\x00', 0x107842, 0x0) write$binfmt_script(r6, 0x0, 0xffffff3c) bpf$MAP_CREATE(0x0, &(0x7f0000002100)=ANY=[@ANYRESDEC], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000002100)=ANY=[@ANYRESDEC], 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') (async) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r11 = dup(r10) ioctl$KVM_SET_MSRS(r11, 0x4048aecb, &(0x7f0000000180)=ANY=[@ANYBLOB="0700000000000800eeffffffffffffff"]) (async) ioctl$KVM_SET_MSRS(r11, 0x4048aecb, &(0x7f0000000180)=ANY=[@ANYBLOB="0700000000000800eeffffffffffffff"]) sendmsg$nl_route(r11, &(0x7f00000021c0)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)=@ipv6_deladdrlabel={0x2c, 0x49, 0x300, 0x70bd29, 0x25dfdbff, {0xa, 0x0, 0x3f, 0x0, r5, 0x6}, [@IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_LABEL={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4004000) read$FUSE(r7, &(0x7f0000000080)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x40, 0x0) 209.883884ms ago: executing program 1 (id=489): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000000000000850000000f000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='ext4_writepages\x00', r0}, 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SREG_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="48000000020903"], 0x48}, 0x1, 0x0, 0x0, 0xa804}, 0x48000) (async, rerun: 32) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000040), r3) 209.348638ms ago: executing program 3 (id=490): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) r1 = add_key(&(0x7f0000000180)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000400)="1b", 0x1, 0xfffffffffffffffe) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800c0}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x80) keyctl$read(0xb, r1, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000780)={0x10, 0x6, {0x4, @usage=0x3, 0x0, 0x1, 0x8000, 0x9, 0x45e0, 0xffffffff, 0x8, @struct={0x5, 0x4}, 0x8, 0x2, [0x8000000000000000, 0xfffffffffffffff8, 0x0, 0x8, 0x7, 0x1]}, {0x7, @struct={0x6, 0x8}, 0x0, 0x8001, 0x94, 0x9, 0x20000000, 0x112f, 0x80, @struct={0x9, 0x1}, 0x8, 0x80000000, [0x5, 0xffffffffffffffff, 0x9, 0x6, 0x9, 0x3]}, {0x10001, @usage=0x18000000000000, 0x0, 0x1, 0x1, 0x9, 0x730e, 0x10, 0x2, @struct={0x1, 0x9}, 0x81, 0xa, [0x9, 0x68, 0xffffffff7fffffff, 0x4, 0x5, 0x3]}, {0xffffffffffffffff, 0x1, 0x2}}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000b80)={0x0, 0x7, 0x2, 0x1}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002300)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000002700)={0x16, 0x2, {0x4, @struct={0xfe, 0x3}, r3, 0xffff, 0x9, 0x200, 0x9, 0x0, 0x412, @usage=0x400, 0x3, 0x8, [0x0, 0x6, 0xbd82, 0x371, 0x1, 0x7]}, {0x8, @struct={0xc, 0x100000}, r4, 0x0, 0x7, 0xec, 0x2, 0x3, 0x80, @struct={0x6, 0x65a}, 0x6, 0x8, [0xb3, 0xe6, 0xfffffffffffffffe, 0xc, 0xc, 0xfff]}, {0x6, @struct={0x7, 0xc4}, r5, 0x7, 0x6, 0x16, 0x9, 0x9, 0xd8, @struct={0x3, 0x8}, 0xbd2, 0x5, [0x316ddd28, 0x0, 0x5d00, 0x8, 0x9d, 0xca]}, {0xb936, 0x4, 0x8}}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x8, 0x0, 0x2}}}}}}, 0x0) socket(0x2, 0x2, 0x1) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002"], 0x20}}, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e23, 0x4, @mcast2, 0x4}, 0x1c) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r9, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}}, 0x0) 156.847765ms ago: executing program 1 (id=491): ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xc0145b0d, &(0x7f0000000040)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) close(r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000"], 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0xfffffeff}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r3}, &(0x7f0000000440), &(0x7f0000000480)=r3}, 0x20) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) r6 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000006c0)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x210020, &(0x7f0000000500)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=r2, @ANYRES8=r3, @ANYRES16=r7]) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/116, 0x0}) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000200)={0x1, r5}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000940)={0x4, 0x0, [{0x2000, 0x93, &(0x7f0000000a00)=""/148}, {0x18800, 0xc1, &(0x7f0000000700)=""/148}, {0xdddd0000, 0xab, &(0x7f00000007c0)=""/171}, {0x1000, 0xffffffffffffffc2, &(0x7f0000000580)=""/145}]}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/72, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, 0x0) r8 = openat$cgroup_ro(r6, &(0x7f00000000c0)='rdma.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r8, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') 156.408028ms ago: executing program 0 (id=492): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x48}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010023010000050000000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r10, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) sendmsg$NFC_CMD_DEP_LINK_DOWN(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r6, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x185) r15 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000400)={0x0, 0xffffffffffffff50, &(0x7f00000003c0)={&(0x7f0000000340)={0x2c, r15, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0xb4}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x22}]}, 0x2c}}, 0x0) 155.781977ms ago: executing program 3 (id=493): syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x183000) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x3000002, 0x6031, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) io_uring_setup(0x1009, &(0x7f0000000040)={0x0, 0x9f3, 0x400, 0x0, 0x4}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect(r2, &(0x7f00000004c0)=@rc={0x1f, @any, 0x4}, 0x80) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x303000, 0x0) r4 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='fd', &(0x7f00000000c0)='3', 0x0) connect(r3, &(0x7f00000004c0)=@rc={0x1f, @any, 0x8}, 0x80) close_range(r1, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000580000/0x4000)=nil) syz_clone(0x140011, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f000032c000/0x1000)=nil, 0x1000, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000180)={0x0, 0x8, 0x0, 0x5, "d88fd87f1ad6eeb75a957fe0213b2e100af028f0030b2eff0b61e6e66b8f37ff"}) 0s ago: executing program 1 (id=494): r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast1, 0x4e20, 0x1000002, 'lblc\x00'}, 0x2c) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000bc0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x4000000, 0x0, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x24}}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 38.204484][ T39] audit: type=1400 audit(1732290971.083:81): avc: denied { rlimitinh } for pid=5930 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.209527][ T39] audit: type=1400 audit(1732290971.083:82): avc: denied { siginh } for pid=5930 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 39.724829][ T39] audit: type=1400 audit(1732290972.613:83): avc: denied { read } for pid=5349 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 39.732869][ T39] audit: type=1400 audit(1732290972.613:84): avc: denied { append } for pid=5349 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.740720][ T39] audit: type=1400 audit(1732290972.613:85): avc: denied { open } for pid=5349 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.748584][ T39] audit: type=1400 audit(1732290972.613:86): avc: denied { getattr } for pid=5349 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:11432' (ED25519) to the list of known hosts. [ 39.935650][ T39] audit: type=1400 audit(1732290972.823:87): avc: denied { name_bind } for pid=5935 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 41.639321][ T5937] cgroup: Unknown subsys name 'net' [ 41.751023][ T5937] cgroup: Unknown subsys name 'cpuset' [ 41.755675][ T5937] cgroup: Unknown subsys name 'rlimit' [ 41.940100][ T5940] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.536779][ T5937] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 44.062260][ T39] kauditd_printk_skb: 17 callbacks suppressed [ 44.062271][ T39] audit: type=1400 audit(1732290976.953:105): avc: denied { execmem } for pid=5944 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 44.245603][ T39] audit: type=1400 audit(1732290977.133:106): avc: denied { create } for pid=5948 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.254432][ T39] audit: type=1400 audit(1732290977.133:107): avc: denied { read write } for pid=5948 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 44.261092][ T39] audit: type=1400 audit(1732290977.143:108): avc: denied { open } for pid=5948 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 44.267516][ T39] audit: type=1400 audit(1732290977.143:109): avc: denied { ioctl } for pid=5948 comm="syz-executor" path="socket:[4967]" dev="sockfs" ino=4967 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.296087][ T5957] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 44.299367][ T5957] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 44.299613][ T5950] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 44.301780][ T5957] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 44.304861][ T5962] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 44.306107][ T5957] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 44.309159][ T5958] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 44.310448][ T5957] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 44.312242][ T5958] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 44.314068][ T5957] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 44.314271][ T5962] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 44.314827][ T5962] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 44.315475][ T5962] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 44.315815][ T5962] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 44.315986][ T5962] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 44.317247][ T5958] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 44.319049][ T5957] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 44.321225][ T5958] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 44.324358][ T39] audit: type=1400 audit(1732290977.213:110): avc: denied { read } for pid=5954 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 44.325275][ T5958] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 44.327221][ T5950] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 44.327475][ T39] audit: type=1400 audit(1732290977.213:111): avc: denied { open } for pid=5954 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 44.327506][ T39] audit: type=1400 audit(1732290977.213:112): avc: denied { mounton } for pid=5954 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 44.364013][ T5950] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 44.367368][ T5950] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 44.370299][ T5950] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 44.372858][ T5950] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 44.489747][ T39] audit: type=1400 audit(1732290977.383:113): avc: denied { module_request } for pid=5954 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 44.505456][ T5954] chnl_net:caif_netlink_parms(): no params data found [ 44.512142][ T5951] chnl_net:caif_netlink_parms(): no params data found [ 44.599305][ T5948] chnl_net:caif_netlink_parms(): no params data found [ 44.670415][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.672888][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.675611][ T5951] bridge_slave_0: entered allmulticast mode [ 44.679064][ T5951] bridge_slave_0: entered promiscuous mode [ 44.685510][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.690429][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.692949][ T5951] bridge_slave_1: entered allmulticast mode [ 44.695829][ T5951] bridge_slave_1: entered promiscuous mode [ 44.713715][ T5954] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.716214][ T5954] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.721065][ T5954] bridge_slave_0: entered allmulticast mode [ 44.723208][ T5954] bridge_slave_0: entered promiscuous mode [ 44.725796][ T5954] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.728353][ T5954] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.730255][ T5954] bridge_slave_1: entered allmulticast mode [ 44.732247][ T5954] bridge_slave_1: entered promiscuous mode [ 44.735369][ T5955] chnl_net:caif_netlink_parms(): no params data found [ 44.764441][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.806473][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.833113][ T5954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.836003][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.838615][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.840957][ T5948] bridge_slave_0: entered allmulticast mode [ 44.843498][ T5948] bridge_slave_0: entered promiscuous mode [ 44.872276][ T5954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.882691][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.884606][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.886646][ T5948] bridge_slave_1: entered allmulticast mode [ 44.888785][ T5948] bridge_slave_1: entered promiscuous mode [ 44.901390][ T5951] team0: Port device team_slave_0 added [ 44.918625][ T5954] team0: Port device team_slave_0 added [ 44.930606][ T5948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.934804][ T5951] team0: Port device team_slave_1 added [ 44.945938][ T5954] team0: Port device team_slave_1 added [ 44.957462][ T5948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.998195][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.000186][ T5955] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.002098][ T5955] bridge_slave_0: entered allmulticast mode [ 45.004121][ T5955] bridge_slave_0: entered promiscuous mode [ 45.034454][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.036314][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.043410][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.048778][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.050989][ T5955] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.053218][ T5955] bridge_slave_1: entered allmulticast mode [ 45.055885][ T5955] bridge_slave_1: entered promiscuous mode [ 45.059189][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.061265][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.068579][ T5954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.074247][ T5948] team0: Port device team_slave_0 added [ 45.076451][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.079642][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.086237][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.106618][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.108541][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.114776][ T5954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.118902][ T5948] team0: Port device team_slave_1 added [ 45.140159][ T5955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.146144][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.148116][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.155683][ T5948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.159631][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.161541][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.168498][ T5948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.186473][ T5955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.244777][ T5951] hsr_slave_0: entered promiscuous mode [ 45.247219][ T5951] hsr_slave_1: entered promiscuous mode [ 45.263588][ T5954] hsr_slave_0: entered promiscuous mode [ 45.265767][ T5954] hsr_slave_1: entered promiscuous mode [ 45.268503][ T5954] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.271241][ T5954] Cannot create hsr debugfs directory [ 45.291010][ T5955] team0: Port device team_slave_0 added [ 45.323792][ T5955] team0: Port device team_slave_1 added [ 45.345243][ T5948] hsr_slave_0: entered promiscuous mode [ 45.348678][ T5948] hsr_slave_1: entered promiscuous mode [ 45.351134][ T5948] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.353771][ T5948] Cannot create hsr debugfs directory [ 45.380533][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.383093][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.392029][ T5955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.415130][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.417771][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.426256][ T5955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.517855][ T5955] hsr_slave_0: entered promiscuous mode [ 45.520472][ T5955] hsr_slave_1: entered promiscuous mode [ 45.522985][ T5955] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.525119][ T5955] Cannot create hsr debugfs directory [ 45.655158][ T5954] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 45.663074][ T5954] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 45.669335][ T5954] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.673315][ T5954] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 45.728102][ T5951] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 45.731429][ T5951] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 45.735625][ T5951] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 45.739475][ T5951] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 45.762886][ T5948] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 45.767909][ T5948] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 45.774458][ T5948] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 45.779049][ T5948] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 45.811959][ T5955] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 45.815240][ T5955] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 45.825516][ T5955] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 45.832841][ T5955] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 45.841416][ T5954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.857142][ T5954] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.869648][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.871632][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.883958][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.890751][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.892659][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.912831][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.927044][ T5948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.930509][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.932372][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.940483][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.942759][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.961664][ T5948] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.974631][ T5955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.989018][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.990496][ T39] audit: type=1400 audit(1732290978.883:114): avc: denied { sys_module } for pid=5954 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 45.991282][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.000007][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.001874][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.014804][ T5955] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.032463][ T1132] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.035071][ T1132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.042130][ T1132] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.043998][ T1132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.069615][ T5954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.110259][ T5954] veth0_vlan: entered promiscuous mode [ 46.114800][ T5954] veth1_vlan: entered promiscuous mode [ 46.128152][ T5948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.133957][ T5954] veth0_macvtap: entered promiscuous mode [ 46.138669][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.141378][ T5954] veth1_macvtap: entered promiscuous mode [ 46.152126][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.160974][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.172041][ T5954] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.175140][ T5954] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.178471][ T5954] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.180791][ T5954] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.188533][ T5955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.192981][ T5948] veth0_vlan: entered promiscuous mode [ 46.204545][ T5948] veth1_vlan: entered promiscuous mode [ 46.220536][ T5951] veth0_vlan: entered promiscuous mode [ 46.230377][ T5951] veth1_vlan: entered promiscuous mode [ 46.254399][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.257076][ T5948] veth0_macvtap: entered promiscuous mode [ 46.257565][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.269424][ T5955] veth0_vlan: entered promiscuous mode [ 46.273967][ T5948] veth1_macvtap: entered promiscuous mode [ 46.278844][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.280902][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.281944][ T5955] veth1_vlan: entered promiscuous mode [ 46.285784][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.289122][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.292253][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.309381][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.312292][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.316051][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.320397][ T5955] veth0_macvtap: entered promiscuous mode [ 46.323091][ T5951] veth0_macvtap: entered promiscuous mode [ 46.324956][ T5954] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 46.327012][ T5955] veth1_macvtap: entered promiscuous mode [ 46.332034][ T5948] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.335099][ T5948] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.338709][ T5950] Bluetooth: hci2: command tx timeout [ 46.338716][ T5959] Bluetooth: hci1: command tx timeout [ 46.343143][ T5948] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.346161][ T5948] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.356187][ T5955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.359308][ T5955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.366718][ T5955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.369928][ T5955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.373616][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.376862][ T5955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.379495][ T5955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.381879][ T5955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.384441][ T5955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.388985][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.392024][ T5951] veth1_macvtap: entered promiscuous mode [ 46.399497][ T5955] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.401955][ T5955] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.404265][ T5955] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.406466][ T5955] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.413338][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.416238][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.419308][ T5959] Bluetooth: hci0: command tx timeout [ 46.421229][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.424284][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.427134][ T5959] Bluetooth: hci3: command tx timeout [ 46.427458][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.432681][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.439356][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.455098][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.458250][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.460868][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.463914][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.466817][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.469595][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.472675][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.494916][ T5951] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.499558][ T5951] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.501891][ T5951] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.506769][ T5951] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.514495][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.516800][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.540960][ T1132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.544132][ T1132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.558499][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.561141][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.579028][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.579042][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.600962][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.603043][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.604154][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.607828][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.670524][ T6030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 46.832448][ T6054] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.844523][ T6054] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14'. [ 46.927138][ T2296] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 46.933107][ T6063] random: crng reseeded on system resumption [ 46.988292][ T6064] 9pnet_fd: Insufficient options for proto=fd [ 47.003287][ T6065] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 47.005347][ T6065] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 47.066725][ T2296] usb 7-1: device descriptor read/64, error -71 [ 47.177844][ T6070] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 47.179729][ T6070] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 47.182331][ T6070] vhci_hcd vhci_hcd.0: Device attached [ 47.185621][ T6071] vhci_hcd: connection closed [ 47.187246][ T77] vhci_hcd: stop threads [ 47.189971][ T77] vhci_hcd: release socket [ 47.191163][ T77] vhci_hcd: disconnect device [ 47.306732][ T2296] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 47.436718][ T2296] usb 7-1: device descriptor read/64, error -71 [ 47.546766][ T2296] usb usb7-port1: attempt power cycle [ 47.799651][ T6090] input: syz0 as /devices/virtual/input/input5 [ 47.897532][ T2296] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 47.923449][ T2296] usb 7-1: device descriptor read/8, error -71 [ 47.963303][ T6100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.30'. [ 47.967406][ T6100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.30'. [ 47.987268][ T6103] netlink: 20 bytes leftover after parsing attributes in process `syz.1.31'. [ 47.989719][ T6103] Zero length message leads to an empty skb [ 48.012200][ T6105] batadv_slave_1: entered promiscuous mode [ 48.018187][ T6105] netlink: 132 bytes leftover after parsing attributes in process `syz.0.32'. [ 48.023727][ T6105] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 48.038866][ T6104] batadv_slave_1: left promiscuous mode [ 48.140838][ T6114] netlink: 'syz.3.35': attribute type 10 has an invalid length. [ 48.150076][ T6114] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.153117][ T6114] bond0: (slave team0): Enslaving as an active interface with an up link [ 48.156670][ T2296] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 48.183029][ T2296] usb 7-1: device descriptor read/8, error -71 [ 48.222991][ T6117] netlink: 'syz.3.36': attribute type 2 has an invalid length. [ 48.225481][ T6117] netlink: 'syz.3.36': attribute type 9 has an invalid length. [ 48.227787][ T6117] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.36'. [ 48.233075][ T6117] af_packet: tpacket_rcv: packet too big, clamped from 212960 to 3952. macoff=96 [ 48.235906][ T6117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5125 sclass=netlink_route_socket pid=6117 comm=syz.3.36 [ 48.244046][ T6117] veth1_to_batadv: entered promiscuous mode [ 48.245758][ T6117] macsec1: entered promiscuous mode [ 48.303334][ T2296] usb usb7-port1: unable to enumerate USB device [ 48.326770][ T25] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 48.416723][ T5959] Bluetooth: hci2: command tx timeout [ 48.419008][ T5950] Bluetooth: hci1: command tx timeout [ 48.478911][ T25] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 48.481139][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.484735][ T25] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 48.487230][ T25] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 48.489402][ T25] usb 5-1: Manufacturer: syz [ 48.492490][ T25] usb 5-1: config 0 descriptor?? [ 48.506960][ T5950] Bluetooth: hci3: command tx timeout [ 48.508474][ T5950] Bluetooth: hci0: command tx timeout [ 48.546747][ T25] rc_core: IR keymap rc-hauppauge not found [ 48.549061][ T25] Registered IR keymap rc-empty [ 48.553119][ T25] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 48.557488][ T25] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input6 [ 48.706208][ T5994] usb 5-1: USB disconnect, device number 2 [ 48.718013][ T6146] netlink: 28 bytes leftover after parsing attributes in process `syz.3.44'. [ 48.718017][ T6145] netlink: 28 bytes leftover after parsing attributes in process `syz.3.44'. [ 48.724100][ T6145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.44'. [ 48.869100][ T6150] netlink: 'syz.1.45': attribute type 21 has an invalid length. [ 48.871208][ T6150] netlink: 'syz.1.45': attribute type 4 has an invalid length. [ 48.873466][ T6150] netlink: 'syz.1.45': attribute type 5 has an invalid length. [ 48.876188][ T6150] overlayfs: failed to resolve './file0': -2 [ 48.964643][ T6153] vlan0: entered promiscuous mode [ 48.971177][ T6153] team0: Port device vlan0 added [ 49.070709][ T6162] evm: overlay not supported [ 49.107344][ T6164] bridge_slave_1: left allmulticast mode [ 49.109350][ T6164] bridge_slave_1: left promiscuous mode [ 49.112299][ T6164] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.119807][ T6164] bridge_slave_0: left allmulticast mode [ 49.121349][ T6164] bridge_slave_0: left promiscuous mode [ 49.122984][ T6164] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.475825][ T6172] program syz.0.52 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 49.478366][ T6172] ata1.00: invalid service action 31 [ 49.490125][ T39] kauditd_printk_skb: 119 callbacks suppressed [ 49.490135][ T39] audit: type=1800 audit(1732290982.383:234): pid=6172 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.52" name="bus" dev="overlay" ino=98 res=0 errno=0 [ 49.497698][ T39] audit: type=1800 audit(1732290982.383:235): pid=6172 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.52" name="bus" dev="overlay" ino=98 res=0 errno=0 [ 49.562997][ T39] audit: type=1400 audit(1732290982.453:236): avc: denied { getopt } for pid=6174 comm="syz.0.53" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.689509][ T39] audit: type=1400 audit(1732290982.583:237): avc: denied { create } for pid=6174 comm="syz.0.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 49.694983][ T39] audit: type=1400 audit(1732290982.583:238): avc: denied { write } for pid=6174 comm="syz.0.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 49.739818][ T39] audit: type=1400 audit(1732290982.633:239): avc: denied { read } for pid=6183 comm="syz.2.56" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 49.748027][ T39] audit: type=1400 audit(1732290982.633:240): avc: denied { open } for pid=6183 comm="syz.2.56" path="/dev/dri/card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 49.756191][ T39] audit: type=1400 audit(1732290982.633:241): avc: denied { ioctl } for pid=6183 comm="syz.2.56" path="/dev/dri/card2" dev="devtmpfs" ino=639 ioctlcmd=0x64bd scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 49.764193][ T39] audit: type=1400 audit(1732290982.633:242): avc: denied { ioctl } for pid=6183 comm="syz.2.56" path="socket:[11344]" dev="sockfs" ino=11344 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 49.771733][ T39] audit: type=1400 audit(1732290982.633:243): avc: denied { write } for pid=6183 comm="syz.2.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 49.795420][ T6187] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 50.498140][ T5959] Bluetooth: hci1: command tx timeout [ 50.507747][ T5959] Bluetooth: hci2: command tx timeout [ 50.577787][ T5959] Bluetooth: hci0: command tx timeout [ 50.577890][ T5950] Bluetooth: hci3: command tx timeout [ 50.596670][ T25] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 50.619604][ T6206] binder: 6205:6206 ioctl c0306201 0 returned -14 [ 50.726903][ T6006] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 50.751676][ T6209] team0: Port device vlan2 added [ 50.771394][ T25] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 50.774092][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.778181][ T25] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 50.780498][ T25] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 50.782580][ T25] usb 8-1: Manufacturer: syz [ 50.785675][ T25] usb 8-1: config 0 descriptor?? [ 50.826715][ T25] rc_core: IR keymap rc-hauppauge not found [ 50.828370][ T25] Registered IR keymap rc-empty [ 50.829998][ T25] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 50.834282][ T25] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input7 [ 50.848305][ T6214] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 50.850769][ T6214] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 50.886819][ T6006] usb 6-1: Using ep0 maxpacket: 8 [ 50.890739][ T6006] usb 6-1: config 2 interface 0 has no altsetting 0 [ 50.894559][ T6006] usb 6-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 50.897055][ T6006] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.899122][ T6006] usb 6-1: Product: syz [ 50.900278][ T6006] usb 6-1: Manufacturer: syz [ 50.901526][ T6006] usb 6-1: SerialNumber: syz [ 50.998408][ T25] usb 8-1: USB disconnect, device number 2 [ 51.017263][ T5994] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 51.110882][ T6006] usb 6-1: USB disconnect, device number 2 [ 51.146732][ T5994] usb 5-1: device descriptor read/64, error -71 [ 51.386690][ T5994] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 51.526735][ T5994] usb 5-1: device descriptor read/64, error -71 [ 51.640090][ T5994] usb usb5-port1: attempt power cycle [ 51.757990][ T5950] Bluetooth: hci0: Malformed LE Event: 0x1b [ 51.828574][ T6252] bond0: entered promiscuous mode [ 51.829981][ T6252] bond_slave_0: entered promiscuous mode [ 51.831539][ T6252] bond_slave_1: entered promiscuous mode [ 51.833075][ T6252] team0: entered promiscuous mode [ 51.834419][ T6252] team_slave_0: entered promiscuous mode [ 51.836070][ T6252] team_slave_1: entered promiscuous mode [ 51.841965][ T6255] lo speed is unknown, defaulting to 1000 [ 51.844883][ T6255] lo speed is unknown, defaulting to 1000 [ 51.849699][ T6255] lo speed is unknown, defaulting to 1000 [ 51.854038][ T6255] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 51.860662][ T6255] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 51.877580][ T6255] lo speed is unknown, defaulting to 1000 [ 51.880784][ T6255] lo speed is unknown, defaulting to 1000 [ 51.882952][ T6255] lo speed is unknown, defaulting to 1000 [ 51.885446][ T6255] lo speed is unknown, defaulting to 1000 [ 51.976812][ T5994] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 51.997983][ T5994] usb 5-1: device descriptor read/8, error -71 [ 52.247322][ T5994] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 52.279602][ T5994] usb 5-1: device descriptor read/8, error -71 [ 52.353637][ T6296] __nla_validate_parse: 3 callbacks suppressed [ 52.353648][ T6296] netlink: 32 bytes leftover after parsing attributes in process `syz.1.90'. [ 52.372257][ T6296] 9pnet: Could not find request transport: Nd [ 52.387766][ T5994] usb usb5-port1: unable to enumerate USB device [ 52.391005][ T6296] xt_CT: No such helper "pptp" [ 52.478583][ T11] bond0: (slave bond_slave_0): interface is now down [ 52.481718][ T11] bond0: (slave bond_slave_1): interface is now down [ 52.485785][ T11] bond0: now running without any active interface! [ 52.487242][ T6303] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6303 comm=syz.3.92 [ 52.524312][ T6305] syz.3.93 uses obsolete (PF_INET,SOCK_PACKET) [ 52.563899][ T6307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.94'. [ 52.576811][ T5950] Bluetooth: hci1: command tx timeout [ 52.586696][ T5950] Bluetooth: hci2: command tx timeout [ 52.657446][ T5950] Bluetooth: hci3: command tx timeout [ 52.659560][ T5950] Bluetooth: hci0: command tx timeout [ 52.834134][ T6320] mkiss: ax0: crc mode is auto. [ 52.892553][ T6321] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 53.024023][ T6328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.100'. [ 53.107694][ T6332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.102'. [ 53.276863][ T6353] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 53.284817][ T6353] vxcan0: Master is either lo or non-ether device [ 53.726711][ T25] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 53.901468][ T25] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 53.903674][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.908626][ T25] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 53.912362][ T25] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 53.914758][ T25] usb 6-1: Manufacturer: syz [ 53.917203][ T25] usb 6-1: config 0 descriptor?? [ 53.956685][ T25] rc_core: IR keymap rc-hauppauge not found [ 53.958827][ T25] Registered IR keymap rc-empty [ 53.961610][ T25] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 53.964995][ T25] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input8 [ 54.121828][ T6363] FAULT_INJECTION: forcing a failure. [ 54.121828][ T6363] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 54.126210][ T6363] CPU: 3 UID: 0 PID: 6363 Comm: syz.1.112 Not tainted 6.12.0-syzkaller-07749-g28eb75e178d3 #0 [ 54.129753][ T6363] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 54.133444][ T6363] Call Trace: [ 54.134605][ T6363] [ 54.135646][ T6363] dump_stack_lvl+0x16c/0x1f0 [ 54.137323][ T6363] should_fail_ex+0x497/0x5b0 [ 54.138977][ T6363] _copy_to_user+0x32/0xd0 [ 54.140520][ T6363] simple_read_from_buffer+0xd0/0x160 [ 54.142390][ T6363] proc_fail_nth_read+0x198/0x270 [ 54.144087][ T6363] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 54.146010][ T6363] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 54.147933][ T6363] vfs_read+0x1df/0xbe0 [ 54.149425][ T6363] ? __fget_files+0x1fc/0x3a0 [ 54.151054][ T6363] ? __pfx___mutex_lock+0x10/0x10 [ 54.152807][ T6363] ? __pfx_vfs_read+0x10/0x10 [ 54.154462][ T6363] ? __fget_files+0x206/0x3a0 [ 54.156121][ T6363] ksys_read+0x12b/0x250 [ 54.157618][ T6363] ? __pfx_ksys_read+0x10/0x10 [ 54.159305][ T6363] do_syscall_64+0xcd/0x250 [ 54.160883][ T6363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.162936][ T6363] RIP: 0033:0x7f5d76d7d25c [ 54.164494][ T6363] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 54.171049][ T6363] RSP: 002b:00007f5d77aec030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 54.173927][ T6363] RAX: ffffffffffffffda RBX: 00007f5d76f35fa0 RCX: 00007f5d76d7d25c [ 54.176623][ T6363] RDX: 000000000000000f RSI: 00007f5d77aec0a0 RDI: 0000000000000005 [ 54.179338][ T6363] RBP: 00007f5d77aec090 R08: 0000000000000000 R09: 0000000000000000 [ 54.182066][ T6363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.184831][ T6363] R13: 0000000000000000 R14: 00007f5d76f35fa0 R15: 00007ffe691f7d98 [ 54.187572][ T6363] [ 54.208760][ T25] usb 6-1: USB disconnect, device number 3 [ 54.244854][ T6388] netlink: 52 bytes leftover after parsing attributes in process `syz.1.118'. [ 54.253731][ T6390] vxcan1: tx address claim with dest, not broadcast [ 54.307620][ T6399] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 54.309398][ T6399] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 54.312057][ T6399] vhci_hcd vhci_hcd.0: Device attached [ 54.315845][ T6404] vhci_hcd: connection closed [ 54.316014][ T70] vhci_hcd: stop threads [ 54.319074][ T70] vhci_hcd: release socket [ 54.320354][ T70] vhci_hcd: disconnect device [ 54.475599][ T6424] overlay: Unknown parameter 'smackfshat' [ 54.515982][ T39] kauditd_printk_skb: 67 callbacks suppressed [ 54.515993][ T39] audit: type=1400 audit(1732290987.403:311): avc: denied { create } for pid=6426 comm="syz.0.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 54.523111][ T39] audit: type=1400 audit(1732290987.413:312): avc: denied { setopt } for pid=6426 comm="syz.0.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 54.638320][ T39] audit: type=1400 audit(1732290987.533:313): avc: denied { validate_trans } for pid=6428 comm="syz.0.128" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 55.059045][ T39] audit: type=1400 audit(1732290987.953:314): avc: denied { listen } for pid=6435 comm="syz.2.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 55.064407][ T39] audit: type=1400 audit(1732290987.953:315): avc: denied { accept } for pid=6435 comm="syz.2.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 55.111590][ T39] audit: type=1400 audit(1732290988.003:316): avc: denied { write } for pid=6435 comm="syz.2.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 55.124699][ T6437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.130'. [ 55.202120][ T39] audit: type=1400 audit(1732290988.093:317): avc: denied { create } for pid=6447 comm="syz.3.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 55.210626][ T39] audit: type=1400 audit(1732290988.093:318): avc: denied { ioctl } for pid=6447 comm="syz.3.132" path="socket:[9164]" dev="sockfs" ino=9164 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 55.485016][ T39] audit: type=1400 audit(1732290988.373:319): avc: denied { read } for pid=6470 comm="syz.1.139" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 55.493450][ T39] audit: type=1400 audit(1732290988.373:320): avc: denied { open } for pid=6470 comm="syz.1.139" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 55.499827][ T35] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 55.546113][ T5950] Bluetooth: hci0: ACL packet for unknown connection handle 1481 [ 55.658726][ T35] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 55.660927][ T35] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.664170][ T35] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 55.667979][ T35] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 55.670975][ T35] usb 7-1: Manufacturer: syz [ 55.676162][ T35] usb 7-1: config 0 descriptor?? [ 55.726666][ T35] rc_core: IR keymap rc-hauppauge not found [ 55.728285][ T35] Registered IR keymap rc-empty [ 55.730423][ T35] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 55.734633][ T35] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input9 [ 55.848757][ T6508] lo speed is unknown, defaulting to 1000 [ 55.882467][ T64] usb 7-1: USB disconnect, device number 6 [ 56.400399][ T6526] xt_CT: No such helper "pptp" [ 56.606723][ T827] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 56.767532][ T827] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 56.769819][ T827] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.770792][ T6550] mmap: syz.1.166 (6550) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 56.773534][ T827] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 56.777860][ T827] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 56.779921][ T827] usb 8-1: Manufacturer: syz [ 56.782011][ T827] usb 8-1: config 0 descriptor?? [ 56.806762][ T6217] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 56.816812][ T827] rc_core: IR keymap rc-hauppauge not found [ 56.818458][ T827] Registered IR keymap rc-empty [ 56.820181][ T827] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 56.823503][ T827] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input10 [ 56.956668][ T6217] usb 7-1: Using ep0 maxpacket: 16 [ 56.959334][ T6217] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.962187][ T6217] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.964719][ T6217] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 56.968178][ T6217] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 56.970570][ T6217] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.973655][ T6217] usb 7-1: config 0 descriptor?? [ 56.988748][ T827] usb 8-1: USB disconnect, device number 3 [ 57.070451][ T6559] capability: warning: `syz.0.168' uses deprecated v2 capabilities in a way that may be insecure [ 57.206655][ T25] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 57.233292][ T6567] overlayfs: overlapping lowerdir path [ 57.378099][ T25] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 57.380375][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.385190][ T6217] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 57.387548][ T6217] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 57.389462][ T6217] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 57.391343][ T6217] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 57.393264][ T25] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 57.395614][ T25] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 57.397823][ T6217] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 57.401665][ T6217] input: HID 0955:7214 Haptics as /devices/virtual/input/input11 [ 57.405013][ T25] usb 6-1: Manufacturer: syz [ 57.408208][ T25] usb 6-1: config 0 descriptor?? [ 57.421314][ T6217] shield 0003:0955:7214.0002: Registered Thunderstrike controller [ 57.424353][ T6217] shield 0003:0955:7214.0002: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 57.457760][ T25] rc_core: IR keymap rc-hauppauge not found [ 57.459371][ T25] Registered IR keymap rc-empty [ 57.461061][ T25] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 57.464190][ T25] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input12 [ 57.583572][ T6544] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=42256 sclass=netlink_route_socket pid=6544 comm=syz.2.164 [ 57.590773][ T6544] netlink: 68 bytes leftover after parsing attributes in process `syz.2.164'. [ 57.595683][ T6573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.599747][ T6573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.617913][ T6217] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 57.618110][ T5988] usb 7-1: USB disconnect, device number 7 [ 57.621119][ T6217] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 57.629558][ T6217] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 57.631220][ T827] usb 6-1: USB disconnect, device number 4 [ 58.197600][ T6591] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6591 comm=syz.0.176 [ 58.323255][ T6602] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 58.375741][ T6606] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=6606 comm=syz.2.179 [ 58.419103][ T6613] tmpfs: Bad value for 'mpol' [ 58.445583][ T6606] 9pnet_fd: Insufficient options for proto=fd [ 58.686754][ T827] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 58.693358][ T6636] process 'syz.2.188' launched './file2' with NULL argv: empty string added [ 58.717683][ T6636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.188'. [ 58.838173][ T827] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 58.841195][ T827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.845567][ T827] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 58.849099][ T827] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 58.852009][ T827] usb 5-1: Manufacturer: syz [ 58.856157][ T827] usb 5-1: config 0 descriptor?? [ 58.909669][ T827] rc_core: IR keymap rc-hauppauge not found [ 58.911776][ T827] Registered IR keymap rc-empty [ 58.913481][ T827] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 58.916803][ T827] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input13 [ 59.048496][ T6663] ip6t_REJECT: ECHOREPLY is not supported [ 59.065562][ T827] usb 5-1: USB disconnect, device number 7 [ 59.184317][ T6669] program syz.2.196 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.301290][ T6673] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.198'. [ 59.304975][ T6673] kAFS: unparsable volume name [ 59.465999][ T6690] lo speed is unknown, defaulting to 1000 [ 59.579331][ T6693] lo speed is unknown, defaulting to 1000 [ 59.606827][ T39] kauditd_printk_skb: 47 callbacks suppressed [ 59.606838][ T39] audit: type=1400 audit(1732290992.493:368): avc: denied { ioctl } for pid=6708 comm="syz.3.208" path="socket:[13700]" dev="sockfs" ino=13700 ioctlcmd=0x9408 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 59.616352][ T39] audit: type=1400 audit(1732290992.493:369): avc: denied { mount } for pid=6709 comm="syz.0.209" name="/" dev="ramfs" ino=11779 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 59.619922][ T6712] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 59.622831][ T39] audit: type=1400 audit(1732290992.503:370): avc: denied { read write } for pid=6708 comm="syz.3.208" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 59.624585][ T6712] overlayfs: failed to set xattr on upper [ 59.630684][ T39] audit: type=1400 audit(1732290992.503:371): avc: denied { open } for pid=6708 comm="syz.3.208" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 59.630719][ T39] audit: type=1400 audit(1732290992.503:372): avc: denied { create } for pid=6692 comm="syz.1.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 59.637060][ T6712] overlayfs: ...falling back to redirect_dir=nofollow. [ 59.640862][ T39] audit: type=1400 audit(1732290992.503:373): avc: denied { mount } for pid=6709 comm="syz.0.209" name="/" dev="ramfs" ino=14614 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 59.645850][ T6712] overlayfs: ...falling back to index=off. [ 59.645858][ T6712] overlayfs: ...falling back to uuid=null. [ 59.645865][ T6712] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 59.649241][ T39] audit: type=1400 audit(1732290992.503:374): avc: denied { mounton } for pid=6709 comm="syz.0.209" path="/48/file0" dev="ramfs" ino=14614 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 59.692060][ T39] audit: type=1400 audit(1732290992.583:375): avc: denied { unmount } for pid=5954 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 59.708507][ T6717] netlink: 40 bytes leftover after parsing attributes in process `syz.3.211'. [ 59.734995][ T77] Bluetooth: Error in BCSP hdr checksum [ 59.769356][ T39] audit: type=1400 audit(1732290992.663:376): avc: denied { read } for pid=6729 comm="syz.1.214" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 59.776250][ T39] audit: type=1400 audit(1732290992.663:377): avc: denied { open } for pid=6729 comm="syz.1.214" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 59.827559][ T6739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.216'. [ 59.870288][ T6743] lo speed is unknown, defaulting to 1000 [ 60.088987][ T6006] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 60.236512][ T6751] netlink: 'syz.2.220': attribute type 1 has an invalid length. [ 60.239502][ T6751] netlink: 224 bytes leftover after parsing attributes in process `syz.2.220'. [ 60.256687][ T6006] usb 5-1: Using ep0 maxpacket: 16 [ 60.260392][ T6006] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 60.262614][ T6006] usb 5-1: config 0 has no interface number 0 [ 60.264241][ T6006] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 60.267299][ T6006] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 60.270976][ T6006] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 60.273430][ T6006] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 60.275932][ T6006] usb 5-1: Product: syz [ 60.278077][ T6006] usb 5-1: SerialNumber: syz [ 60.281955][ T6006] usb 5-1: config 0 descriptor?? [ 60.284982][ T6006] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 60.288113][ T6006] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.8/input/input14 [ 60.365245][ T6754] netlink: 'syz.1.221': attribute type 2 has an invalid length. [ 60.368313][ T6754] netlink: 'syz.1.221': attribute type 1 has an invalid length. [ 60.372167][ T6754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.221'. [ 60.490302][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 60.582446][ T6765] overlay: ./file0 is not a directory [ 60.696383][ C2] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 60.699975][ C2] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 60.702668][ C2] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 60.705436][ C2] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 60.706714][ T827] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 60.708147][ C2] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 60.712684][ C2] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 60.715509][ C2] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 60.718261][ C2] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 60.720937][ C2] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 60.723626][ C2] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 60.726612][ T59] usb 5-1: USB disconnect, device number 8 [ 60.728831][ C2] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 60.735521][ T59] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 60.866756][ T827] usb 6-1: Using ep0 maxpacket: 8 [ 60.871047][ T827] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 60.874076][ T827] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 60.877990][ T827] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 60.881631][ T827] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 60.885341][ T827] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 60.890141][ T827] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 60.893432][ T827] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.086758][ T64] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 61.101320][ T827] usb 6-1: usb_control_msg returned -32 [ 61.102862][ T827] usbtmc 6-1:16.0: can't read capabilities [ 61.236771][ T64] usb 7-1: Using ep0 maxpacket: 8 [ 61.240050][ T64] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 61.243045][ T64] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 61.247181][ T64] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 61.250644][ T64] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 61.253442][ T64] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 61.257496][ T64] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 61.260540][ T64] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.467054][ T64] usb 7-1: usb_control_msg returned -32 [ 61.469279][ T64] usbtmc 7-1:16.0: can't read capabilities [ 61.701574][ T6795] lo speed is unknown, defaulting to 1000 [ 61.766872][ T6798] netlink: 132 bytes leftover after parsing attributes in process `syz.0.236'. [ 61.770003][ T6798] netlink: 'syz.0.236': attribute type 10 has an invalid length. [ 61.777760][ T6798] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 61.786832][ T5950] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 61.787562][ T5959] Bluetooth: hci4: command 0x1003 tx timeout [ 61.807841][ T6762] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 61.820268][ T5988] usb 6-1: USB disconnect, device number 5 [ 61.919516][ T6802] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 62.371588][ T6807] geneve2: entered promiscuous mode [ 62.373080][ T6807] geneve2: entered allmulticast mode [ 62.788393][ T6823] Bluetooth: MGMT ver 1.23 [ 63.092908][ T6838] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 usb_generic_handle_packet: ctrl buffer too small (16384 > 4096) [ 63.656979][ T6853] block nbd0: server does not support multiple connections per device. [ 63.707645][ T6856] block nbd0: shutting down sockets [ 63.845084][ T59] usb 7-1: USB disconnect, device number 8 [ 64.125860][ T6880] capability: warning: `syz.2.264' uses 32-bit capabilities (legacy support in use) [ 64.146884][ T25] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 64.296666][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 64.299871][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 64.303428][ T25] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 64.306882][ T25] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 64.310039][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.314692][ T25] usb 5-1: config 0 descriptor?? [ 64.360205][ T6891] netfs: Couldn't get user pages (rc=-14) [ 64.520601][ T6869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.522932][ T6869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.525601][ T827] usb 5-1: USB disconnect, device number 9 [ 64.675276][ T6894] cgroup2: Unknown parameter 'euid' [ 65.286767][ T827] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 65.436669][ T827] usb 5-1: Invalid ep0 maxpacket: 9 [ 65.438803][ T39] kauditd_printk_skb: 29 callbacks suppressed [ 65.438813][ T39] audit: type=1400 audit(1732290998.333:407): avc: denied { ioctl } for pid=6904 comm="syz.2.270" path="/dev/vhost-net" dev="devtmpfs" ino=1300 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 65.447160][ T39] audit: type=1400 audit(1732290998.333:408): avc: denied { bind } for pid=6904 comm="syz.2.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 65.452098][ T39] audit: type=1400 audit(1732290998.333:409): avc: denied { name_bind } for pid=6904 comm="syz.2.270" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 65.457937][ T39] audit: type=1400 audit(1732290998.333:410): avc: denied { node_bind } for pid=6904 comm="syz.2.270" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 65.463482][ T39] audit: type=1400 audit(1732290998.333:411): avc: denied { setopt } for pid=6904 comm="syz.2.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 65.468922][ T39] audit: type=1400 audit(1732290998.333:412): avc: denied { connect } for pid=6904 comm="syz.2.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 65.473900][ T39] audit: type=1400 audit(1732290998.333:413): avc: denied { name_connect } for pid=6904 comm="syz.2.270" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 65.536832][ T5950] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 65.546879][ T5959] Bluetooth: hci0: command 0x1407 tx timeout [ 65.549923][ T5950] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 65.551687][ T6859] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 65.566726][ T827] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 65.590263][ T6916] No buffer was provided with the request [ 65.642770][ T6925] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=6925 comm=syz.3.275 [ 65.659002][ T6931] ip6gre1: entered allmulticast mode [ 65.660231][ T39] audit: type=1400 audit(1732290998.553:414): avc: denied { create } for pid=6924 comm="syz.3.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 65.703592][ T39] audit: type=1400 audit(1732290998.593:415): avc: denied { append } for pid=6935 comm="syz.1.277" name="iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.718311][ T827] usb 5-1: Invalid ep0 maxpacket: 9 [ 65.721002][ T827] usb usb5-port1: attempt power cycle [ 65.726178][ T39] audit: type=1400 audit(1732290998.613:416): avc: denied { getopt } for pid=6924 comm="syz.3.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 65.987054][ T59] IPVS: starting estimator thread 0... [ 65.991923][ T6957] tipc: Started in network mode [ 65.993381][ T6957] tipc: Node identity ac1414aa, cluster identity 4711 [ 65.996313][ T6957] tipc: Enabled bearer , priority 10 [ 66.066857][ T827] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 66.073439][ T6970] ecryptfs_parse_options: eCryptfs: unrecognized option [wlan1] [ 66.073441][ T6971] ecryptfs_parse_options: eCryptfs: unrecognized option [wlan1] [ 66.073451][ T6971] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 66.073607][ T6971] Error parsing options; rc = [-22] [ 66.075497][ T6970] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 66.075514][ T6970] Error parsing options; rc = [-22] [ 66.089032][ T827] usb 5-1: Invalid ep0 maxpacket: 9 [ 66.097079][ T6958] IPVS: using max 39 ests per chain, 93600 per kthread [ 66.135873][ T6980] Process accounting resumed [ 66.151843][ T6978] tmpfs: Bad value for 'mpol' [ 66.216800][ T827] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 66.237265][ T827] usb 5-1: Invalid ep0 maxpacket: 9 [ 66.239576][ T827] usb usb5-port1: unable to enumerate USB device [ 66.396717][ T1334] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 66.472311][ T7005] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2248643489 (17989147912 ns) > initial count (11631199424 ns). Using initial count to start timer. [ 66.479482][ T7005] bridge_slave_1: left allmulticast mode [ 66.481034][ T7005] bridge_slave_1: left promiscuous mode [ 66.482640][ T7005] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.546762][ T1334] usb 6-1: Using ep0 maxpacket: 8 [ 66.550391][ T1334] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 66.553124][ T1334] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 66.555738][ T1334] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 66.558732][ T1334] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 66.561291][ T1334] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 66.564659][ T1334] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 66.567150][ T1334] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.595313][ T7010] fuse: Unknown parameter 'r遞Dd00000000000000000100000' [ 66.763787][ T7016] xfrm0: entered allmulticast mode [ 66.772290][ T1334] usb 6-1: usb_control_msg returned -32 [ 66.773853][ T1334] usbtmc 6-1:16.0: can't read capabilities [ 66.799535][ T7018] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 66.837854][ T59] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 66.847920][ T5959] Bluetooth: Unexpected continuation frame (len 12) [ 66.850308][ T7020] netlink: 24 bytes leftover after parsing attributes in process `syz.2.304'. [ 66.853530][ T7020] ======================================================= [ 66.853530][ T7020] WARNING: The mand mount option has been deprecated and [ 66.853530][ T7020] and is ignored by this kernel. Remove the mand [ 66.853530][ T7020] option from the mount to silence this warning. [ 66.853530][ T7020] ======================================================= [ 66.978446][ T5959] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 66.981751][ T5959] Bluetooth: hci1: Injecting HCI hardware error event [ 66.986516][ T5958] Bluetooth: hci1: hardware error 0x00 [ 66.988840][ T59] usb 8-1: Using ep0 maxpacket: 8 [ 66.993519][ T59] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 66.997118][ T59] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 66.997168][ T59] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 66.997180][ T59] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.998134][ T59] usb 8-1: config 0 descriptor?? [ 67.007742][ T25] tipc: Node number set to 2886997162 [ 67.010120][ T59] iowarrior 8-1:0.0: no interrupt-in endpoint found [ 67.233600][ T2296] usb 8-1: USB disconnect, device number 4 [ 67.616740][ T5959] Bluetooth: hci0: command 0x1407 tx timeout [ 67.616748][ T5950] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 67.726711][ T59] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 67.877942][ T59] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 67.880248][ T59] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.883658][ T59] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 67.886196][ T59] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 67.888360][ T59] usb 7-1: Manufacturer: syz [ 67.890825][ T59] usb 7-1: config 0 descriptor?? [ 67.936862][ T59] rc_core: IR keymap rc-hauppauge not found [ 67.938542][ T59] Registered IR keymap rc-empty [ 67.941386][ T59] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 67.944820][ T59] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input16 [ 68.096394][ T1334] usb 7-1: USB disconnect, device number 9 [ 68.214048][ T7054] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7054 comm=syz.0.315 [ 68.243079][ T7058] fuse: Bad value for 'fd' [ 68.245172][ T7058] tmpfs: Bad value for 'huge' [ 68.287230][ T7061] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 68.294824][ T7061] kvm: pic: non byte read [ 68.582799][ T7075] netlink: 'syz.0.321': attribute type 4 has an invalid length. [ 68.655368][ T7084] warning: `syz.3.323' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 69.056786][ T5958] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 69.240502][ T7084] overlayfs: statfs failed on './file0' [ 69.679413][ T7115] netlink: 12 bytes leftover after parsing attributes in process `syz.2.333'. [ 69.696716][ T5958] Bluetooth: hci0: command 0x1407 tx timeout [ 69.697068][ T5950] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 69.841826][ T7131] netlink: 'syz.2.337': attribute type 23 has an invalid length. [ 69.843884][ T7131] IPv6: NLM_F_CREATE should be specified when creating new route [ 70.297153][ T7143] netlink: 12 bytes leftover after parsing attributes in process `syz.3.342'. [ 70.339677][ T7145] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7145 comm=syz.3.343 [ 70.352254][ T7145] netlink: 'syz.3.343': attribute type 1 has an invalid length. [ 70.363843][ T7145] 8021q: adding VLAN 0 to HW filter on device bond1 [ 70.369548][ T7145] bond1: entered allmulticast mode [ 70.466804][ T5992] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 70.618337][ T5992] usb 5-1: not running at top speed; connect to a high speed hub [ 70.621333][ T5992] usb 5-1: config 1 interface 0 altsetting 3 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 70.624772][ T5992] usb 5-1: config 1 interface 0 has no altsetting 0 [ 70.628221][ T5992] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 70.630622][ T5992] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.632688][ T5992] usb 5-1: Product: syz [ 70.633806][ T5992] usb 5-1: Manufacturer: syz [ 70.635150][ T5992] usb 5-1: SerialNumber: syz [ 70.637922][ T7141] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 70.668878][ T39] kauditd_printk_skb: 23 callbacks suppressed [ 70.668889][ T39] audit: type=1400 audit(1732291003.563:440): avc: denied { nlmsg_read } for pid=7156 comm="syz.3.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 70.668930][ T7157] netlink: 12 bytes leftover after parsing attributes in process `syz.3.346'. [ 70.849459][ T5992] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 70.857202][ T5992] usb 5-1: USB disconnect, device number 14 [ 70.975743][ T39] audit: type=1400 audit(1732291003.863:441): avc: denied { mount } for pid=7165 comm="syz.2.350" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 70.986701][ T39] audit: type=1400 audit(1732291003.863:442): avc: denied { bind } for pid=7165 comm="syz.2.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 71.034686][ T7168] netlink: 'syz.2.351': attribute type 39 has an invalid length. [ 71.059242][ T1411] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.061136][ T1411] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.327382][ T7173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.352'. [ 71.487997][ T39] audit: type=1400 audit(1732291004.383:443): avc: denied { bind } for pid=7180 comm="syz.0.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 71.493024][ T39] audit: type=1400 audit(1732291004.383:444): avc: denied { setopt } for pid=7180 comm="syz.0.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 71.535141][ T7190] lo speed is unknown, defaulting to 1000 [ 71.606466][ T7193] 9pnet: Could not find request transport: f0x0000000000000004 [ 71.609145][ T7193] netlink: 16 bytes leftover after parsing attributes in process `syz.2.358'. [ 71.630321][ T7196] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 71.638230][ T39] audit: type=1400 audit(1732291004.533:445): avc: denied { getopt } for pid=7195 comm="syz.0.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 71.642328][ T7200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.360'. [ 71.652174][ T7200] netlink: 20 bytes leftover after parsing attributes in process `syz.2.360'. [ 71.654557][ T7200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.360'. [ 71.657065][ T7196] kvm: pic: level sensitive irq not supported [ 71.657448][ T7196] kvm: pic: non byte read [ 71.662406][ T7196] kvm: pic: level sensitive irq not supported [ 71.662658][ T7196] kvm: pic: non byte read [ 71.667143][ T7196] kvm: pic: level sensitive irq not supported [ 71.667391][ T7196] kvm: pic: non byte read [ 71.671370][ T7196] kvm: pic: level sensitive irq not supported [ 71.671756][ T7196] kvm: pic: non byte read [ 71.675441][ T7196] kvm: pic: level sensitive irq not supported [ 71.675790][ T7196] kvm: pic: non byte read [ 71.681521][ T7196] kvm: pic: level sensitive irq not supported [ 71.681745][ T7196] kvm: pic: non byte read [ 71.685585][ T7196] kvm: pic: level sensitive irq not supported [ 71.685812][ T7196] kvm: pic: non byte read [ 71.690442][ T7196] kvm: pic: level sensitive irq not supported [ 71.690925][ T7196] kvm: pic: non byte read [ 71.694656][ T7196] kvm: pic: level sensitive irq not supported [ 71.695229][ T7196] kvm: pic: non byte read [ 71.699146][ T7196] kvm: pic: level sensitive irq not supported [ 71.725584][ T39] audit: type=1400 audit(1732291004.613:446): avc: denied { read } for pid=7201 comm="syz.2.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 71.736665][ T39] audit: type=1400 audit(1732291004.613:447): avc: denied { shutdown } for pid=7201 comm="syz.2.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 71.776771][ T5958] Bluetooth: hci0: command 0x1407 tx timeout [ 71.778706][ T5950] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 72.006317][ T7218] netlink: 'syz.0.365': attribute type 10 has an invalid length. [ 72.014735][ T7218] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 72.177950][ T7028] usbtmc 6-1:16.0: stb usb_control_msg returned -110 [ 72.194554][ T5994] usb 6-1: USB disconnect, device number 6 [ 72.375481][ T5988] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 72.526698][ T5988] usb 7-1: Using ep0 maxpacket: 8 [ 72.531334][ T5988] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 72.534036][ T5988] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 72.537940][ T5988] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 72.542075][ T5988] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 72.545384][ T5988] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 72.549780][ T5988] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 72.552196][ T5988] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 72.555418][ T5988] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 72.556697][ T5994] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 72.558769][ T5988] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 72.564680][ T5988] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 72.569029][ T5988] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 72.571511][ T5988] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 72.575517][ T5988] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 72.579790][ T5988] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 72.583559][ T5988] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 72.590389][ T5988] usb 7-1: string descriptor 0 read error: -22 [ 72.592661][ T5988] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 72.595848][ T5988] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.604530][ T5988] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 72.716680][ T5994] usb 6-1: Using ep0 maxpacket: 16 [ 72.720721][ T5994] usb 6-1: config 1 has an invalid descriptor of length 162, skipping remainder of the config [ 72.724239][ T5994] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 72.729472][ T5994] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 72.732790][ T5994] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.735535][ T5994] usb 6-1: Product: syz [ 72.737102][ T5994] usb 6-1: Manufacturer: 、 [ 72.738712][ T5994] usb 6-1: SerialNumber: syz [ 72.916769][ T2296] usb 7-1: USB disconnect, device number 10 [ 72.918766][ T7229] usb 7-1: Couldn't submit interrupt_out_urb -19 [ 73.148502][ T5994] usb 6-1: 0:2 : does not exist [ 73.164746][ T5994] usb 6-1: USB disconnect, device number 7 [ 73.338242][ T5963] udevd[5963]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 73.386716][ T2296] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 73.538303][ T2296] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 73.540996][ T2296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.544737][ T2296] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 73.547422][ T2296] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 73.549585][ T2296] usb 5-1: Manufacturer: syz [ 73.552310][ T2296] usb 5-1: config 0 descriptor?? [ 73.596722][ T2296] rc_core: IR keymap rc-hauppauge not found [ 73.598420][ T2296] Registered IR keymap rc-empty [ 73.600248][ T2296] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 73.603586][ T2296] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input18 [ 73.766257][ T6006] usb 5-1: USB disconnect, device number 15 [ 73.785088][ T39] audit: type=1400 audit(1732291006.673:448): avc: denied { read } for pid=7252 comm="syz.3.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.797851][ T39] audit: type=1400 audit(1732291006.693:449): avc: denied { setattr } for pid=7252 comm="syz.3.375" name="L2TP/IP" dev="sockfs" ino=17894 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.851124][ T7262] SELinux: policydb version 1687349951 does not match my version range 15-33 [ 73.853781][ T7262] SELinux: failed to load policy [ 73.856272][ T7262] SELinux: policydb version 592713773 does not match my version range 15-33 [ 73.859985][ T7262] SELinux: failed to load policy [ 73.867044][ T5958] Bluetooth: hci0: command 0x1407 tx timeout [ 73.867528][ T5950] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 73.943422][ T7267] block device autoloading is deprecated and will be removed. [ 74.146737][ T64] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 74.188930][ T7285] netlink: 16 bytes leftover after parsing attributes in process `syz.1.386'. [ 74.191421][ T7285] netlink: 16 bytes leftover after parsing attributes in process `syz.1.386'. [ 74.193820][ T7285] netlink: 16 bytes leftover after parsing attributes in process `syz.1.386'. [ 74.196194][ T7285] netlink: 16 bytes leftover after parsing attributes in process `syz.1.386'. [ 74.267512][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 74.310370][ T7294] netlink: 'syz.1.390': attribute type 10 has an invalid length. [ 74.318099][ T64] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 74.320507][ T7294] team0: Port device netdevsim0 added [ 74.323888][ T64] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.329920][ T64] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 74.332270][ T64] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 74.336730][ T64] usb 7-1: Manufacturer: syz [ 74.342737][ T64] usb 7-1: config 0 descriptor?? [ 74.396673][ T64] rc_core: IR keymap rc-hauppauge not found [ 74.398344][ T64] Registered IR keymap rc-empty [ 74.406999][ T64] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 74.410170][ T64] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input19 [ 74.544282][ T7308] kvm: kvm [7307]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 74.550383][ T35] usb 7-1: USB disconnect, device number 11 [ 74.557932][ T7308] kvm: kvm [7307]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 74.569298][ T7308] kvm: kvm [7307]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x4000 [ 74.572024][ T7308] kvm: kvm [7307]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x4000 [ 74.577854][ T7308] kvm: kvm [7307]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 74.676168][ T7333] netlink: 36 bytes leftover after parsing attributes in process `syz.1.397'. [ 74.859660][ T7359] netlink: 12 bytes leftover after parsing attributes in process `syz.0.400'. [ 74.869122][ T7359] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.878669][ T7359] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.880612][ T7359] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 74.883921][ T7359] bond1: (slave vcan1): Error -95 calling set_mac_address [ 75.022548][ T7368] netlink: 'syz.1.402': attribute type 11 has an invalid length. [ 75.122383][ T7378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.406'. [ 75.157466][ T7378] netlink: 4 bytes leftover after parsing attributes in process `syz.0.406'. [ 75.161636][ T7378] netlink: 52 bytes leftover after parsing attributes in process `syz.0.406'. [ 75.214831][ T7381] ptrace attach of "/syz-executor exec"[7383] was attempted by ""[7381] [ 75.220498][ T7378] block nbd0: NBD_DISCONNECT [ 75.224249][ T7377] block nbd0: Disconnected due to user request. [ 75.226361][ T7377] block nbd0: shutting down sockets usb_generic_handle_packet: ctrl buffer too small (16384 > 4096) [ 75.393369][ T7409] 9pnet_fd: Insufficient options for proto=fd [ 75.443904][ T7418] tmpfs: Unknown parameter 'func' [ 75.497388][ T7419] dlm: no locking on control device [ 75.502849][ T7418] mkiss: ax0: crc mode is auto. [ 75.516664][ T5992] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 75.544632][ T7421] tmpfs: Unknown parameter 'func' [ 75.553762][ T7419] netlink: 4 bytes leftover after parsing attributes in process `syz.3.418'. [ 75.557202][ T7419] netlink: 'syz.3.418': attribute type 13 has an invalid length. [ 75.559894][ T7419] netlink: 'syz.3.418': attribute type 14 has an invalid length. [ 75.569152][ T7419] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.572183][ T7419] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.574470][ T7419] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.576932][ T7419] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.580127][ T7419] vxlan0: entered promiscuous mode [ 75.596728][ T64] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 75.722133][ T5992] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 75.725130][ T5992] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.730071][ T5992] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 75.733215][ T5992] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 75.735916][ T5992] usb 5-1: Manufacturer: syz [ 75.740024][ T5992] usb 5-1: config 0 descriptor?? [ 75.774646][ T64] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 75.777777][ T64] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.785998][ T64] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 75.789139][ T64] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 75.791638][ T64] usb 6-1: Manufacturer: syz [ 75.794106][ T64] usb 6-1: config 0 descriptor?? [ 75.797536][ T5992] rc_core: IR keymap rc-hauppauge not found [ 75.799397][ T5992] Registered IR keymap rc-empty [ 75.800904][ T5992] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 75.803928][ T5992] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input21 [ 75.856691][ T64] rc_core: IR keymap rc-hauppauge not found [ 75.858680][ T64] Registered IR keymap rc-empty [ 75.862132][ T64] rc rc1: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc1 [ 75.866655][ T64] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc1/input22 [ 75.915848][ T39] kauditd_printk_skb: 56 callbacks suppressed [ 75.915863][ T39] audit: type=1400 audit(1732291008.803:506): avc: denied { watch } for pid=7435 comm="syz.2.422" path="/102" dev="tmpfs" ino=573 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 75.926413][ T39] audit: type=1400 audit(1732291008.803:507): avc: denied { watch_sb } for pid=7435 comm="syz.2.422" path="/102" dev="tmpfs" ino=573 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 75.934611][ T39] audit: type=1400 audit(1732291008.823:508): avc: denied { name_bind } for pid=7435 comm="syz.2.422" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 75.940221][ T5950] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 75.946712][ T5958] Bluetooth: hci0: command 0x1407 tx timeout [ 75.948679][ T5950] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 75.957581][ T5992] usb 5-1: USB disconnect, device number 16 [ 76.009013][ T39] audit: type=1400 audit(1732291008.903:509): avc: denied { setopt } for pid=7401 comm="syz.1.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 76.013936][ T25] usb 6-1: USB disconnect, device number 8 [ 76.014477][ T39] audit: type=1400 audit(1732291008.903:510): avc: denied { ioctl } for pid=7401 comm="syz.1.413" path="socket:[17110]" dev="sockfs" ino=17110 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 76.191052][ T9] cfg80211: failed to load regulatory.db [ 76.347063][ T39] audit: type=1400 audit(1732291009.233:511): avc: denied { setopt } for pid=7453 comm="syz.3.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 76.459569][ T7454] Bluetooth: MGMT ver 1.23 [ 76.486741][ T35] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 76.636676][ T35] usb 7-1: Using ep0 maxpacket: 32 [ 76.640409][ T35] usb 7-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 1024 [ 76.643133][ T35] usb 7-1: config 1 interface 0 altsetting 9 bulk endpoint 0x82 has invalid maxpacket 1024 [ 76.645611][ T35] usb 7-1: config 1 interface 0 has no altsetting 0 [ 76.649151][ T35] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 76.652065][ T35] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.654652][ T35] usb 7-1: Product: Т [ 76.655841][ T35] usb 7-1: Manufacturer: 糬뛖鉳븱࿼模킓欩ꃑ᎕뤺蒥砮ꅍ蚁㻝╋뀪蛬줒쁋嬵䨍펃卻힆굾筡圏檬볹悻ங [ 76.659793][ T35] usb 7-1: SerialNumber: ஷ꧊犷꧀롄빡⬌ꉭ䙰훇䉉ݟ슖㇦틐ᡣ説귡膩鑜ᑪ芉䞱䑃ꀋ鱬묝ᬕ슜宂ᅤ旼ᜄ⤄｀ߞ꣓꺜浱㊎刢倻힧⽮Ɲᵤ䓖웘랝ṽ瑑ꍁ뎕嶡Ḝ皱솔랏쯈ㄡ쫙␤岷㠪籁曳쵠宻㞔农컢녑Ⲭ믭㵖뺻㦷훉⹒韊뺧藅胄狎崷戞뿀녽灠▁ [ 76.676305][ T7448] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 76.678959][ T7448] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 76.773744][ T39] audit: type=1400 audit(1732291009.663:512): avc: denied { write } for pid=7469 comm="syz.0.435" name="vlan0" dev="proc" ino=4026533671 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 76.891280][ T35] usblp 7-1:1.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 9 proto 2 vid 0x0525 pid 0xA4A8 [ 76.906678][ T35] usb 7-1: USB disconnect, device number 12 [ 76.912476][ T35] usblp0: removed [ 77.018107][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 77.176747][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 77.180123][ T9] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 77.182872][ T9] usb 5-1: config 0 has no interface number 0 [ 77.184909][ T9] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 77.188816][ T9] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 77.192932][ T9] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 77.195368][ T9] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 77.197694][ T9] usb 5-1: Product: syz [ 77.199177][ T9] usb 5-1: SerialNumber: syz [ 77.202103][ T9] usb 5-1: config 0 descriptor?? [ 77.207264][ T9] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 77.210877][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.8/input/input23 [ 77.407004][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 77.421259][ T35] usb 5-1: USB disconnect, device number 17 [ 77.428307][ T35] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 77.696715][ T64] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 77.696848][ T59] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 77.773499][ T39] audit: type=1400 audit(1732291010.663:513): avc: denied { watch_mount } for pid=7505 comm="syz.0.445" path="/117" dev="tmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 77.856737][ T59] usb 6-1: Using ep0 maxpacket: 16 [ 77.859684][ T59] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.862895][ T59] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 77.866469][ T59] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 77.869358][ T59] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.871802][ T64] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 77.874031][ T64] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.877806][ T64] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 77.879849][ T59] usb 6-1: config 0 descriptor?? [ 77.880159][ T64] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 77.883674][ T64] usb 7-1: Manufacturer: syz [ 77.886229][ T64] usb 7-1: config 0 descriptor?? [ 77.936717][ T64] rc_core: IR keymap rc-hauppauge not found [ 77.939050][ T64] Registered IR keymap rc-empty [ 77.940994][ T64] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 77.944788][ T64] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input24 [ 78.016708][ T5958] Bluetooth: hci0: command 0x1407 tx timeout [ 78.016753][ T5950] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 78.095815][ T39] audit: type=1400 audit(1732291010.983:514): avc: denied { bind } for pid=7488 comm="syz.2.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 78.105909][ T35] usb 7-1: USB disconnect, device number 13 [ 78.285945][ T7478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.289201][ T7478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.348604][ T7519] syz.0.449 (7519) used greatest stack depth: 20432 bytes left [ 78.494088][ T7478] raw-gadget.0 gadget.1: fail, usb_ep_set_halt returned -11 [ 78.497968][ T7478] netlink: 'syz.1.437': attribute type 9 has an invalid length. [ 78.508200][ T59] usbhid 6-1:0.0: can't add hid device: -71 [ 78.509890][ T59] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 78.513107][ T59] usb 6-1: USB disconnect, device number 9 [ 78.630979][ T7530] cifs: Unknown parameter 'no9 PG!8E8- ŖEeլ' [ 78.738797][ T39] audit: type=1400 audit(1732291011.633:515): avc: denied { write } for pid=7529 comm="syz.2.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 78.935773][ T7549] Cannot find add_set index 0 as target [ 79.276790][ T35] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 79.427895][ T35] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 79.430117][ T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.433521][ T35] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 79.435965][ T35] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 79.438151][ T35] usb 6-1: Manufacturer: syz [ 79.440767][ T35] usb 6-1: config 0 descriptor?? [ 79.446677][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 79.486645][ T35] rc_core: IR keymap rc-hauppauge not found [ 79.488240][ T35] Registered IR keymap rc-empty [ 79.489892][ T35] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 79.492989][ T35] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input25 [ 79.503840][ T7568] __nla_validate_parse: 2 callbacks suppressed [ 79.503851][ T7568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.464'. [ 79.616661][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 79.619487][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.623155][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58879, setting to 1024 [ 79.626068][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 79.628514][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.632180][ T9] usb 5-1: config 0 descriptor?? [ 79.633945][ T7564] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 79.655043][ T7555] vivid-000: ================= START STATUS ================= [ 79.659874][ T7555] vivid-000: Enable Output Cropping: true grabbed [ 79.662674][ T7555] vivid-000: Enable Output Composing: true grabbed [ 79.664493][ T7555] vivid-000: Enable Output Scaler: true grabbed [ 79.666438][ T7555] vivid-000: Tx RGB Quantization Range: Automatic grabbed [ 79.669163][ T7555] vivid-000: Transmit Mode: HDMI grabbed [ 79.671074][ T7555] vivid-000: Hotplug Present: 0x00000000 [ 79.672614][ T7555] vivid-000: RxSense Present: 0x00000000 [ 79.674265][ T7555] vivid-000: EDID Present: 0x00000000 [ 79.675761][ T7555] vivid-000: ================== END STATUS ================== [ 79.783736][ T5992] usb 6-1: USB disconnect, device number 10 [ 79.845329][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 79.847153][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 79.850587][ T9] usb 5-1: USB disconnect, device number 18 [ 80.004268][ T7585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.468'. [ 80.007602][ T7585] netlink: 12 bytes leftover after parsing attributes in process `syz.2.468'. [ 80.011328][ T7585] netlink: 'syz.2.468': attribute type 7 has an invalid length. [ 80.096889][ T5950] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 80.106776][ T5959] Bluetooth: hci0: command 0x1407 tx timeout [ 80.109026][ T5950] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 80.371564][ T7604] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 80.373467][ T7604] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 80.501646][ T7611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.476'. [ 80.503987][ T7611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.476'. [ 80.549766][ T7614] netlink: 'syz.0.477': attribute type 10 has an invalid length. [ 80.558248][ T7614] team0: Device hsr_slave_0 failed to register rx_handler [ 80.589673][ T59] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 80.686886][ T7619] fuse: Bad value for 'group_id' [ 80.688340][ T7619] fuse: Bad value for 'group_id' [ 80.742906][ T59] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 80.745981][ T59] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.755325][ T59] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 80.758846][ T59] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 80.761309][ T59] usb 7-1: Manufacturer: syz [ 80.763500][ T59] usb 7-1: config 0 descriptor?? [ 80.826820][ T59] rc_core: IR keymap rc-hauppauge not found [ 80.828494][ T59] Registered IR keymap rc-empty [ 80.830883][ T59] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 80.835552][ T59] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input26 [ 80.895128][ T7642] netlink: 16 bytes leftover after parsing attributes in process `syz.1.484'. [ 80.898939][ T7643] netlink: 16 bytes leftover after parsing attributes in process `syz.1.484'. [ 80.954826][ T7642] netlink: 68 bytes leftover after parsing attributes in process `syz.1.484'. [ 80.996730][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 81.099577][ T59] usb 7-1: USB disconnect, device number 14 [ 81.156677][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 81.162602][ T9] usb 5-1: config 0 has no interfaces? [ 81.165486][ T9] usb 5-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f [ 81.168889][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.171652][ T9] usb 5-1: Product: syz [ 81.172901][ T9] usb 5-1: Manufacturer: syz [ 81.174194][ T9] usb 5-1: SerialNumber: syz [ 81.176791][ T9] usb 5-1: config 0 descriptor?? [ 81.393598][ T1334] usb 5-1: USB disconnect, device number 19 [ 81.616774][ T5958] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 81.616785][ T5959] Bluetooth: hci4: command 0xfc11 tx timeout [ 81.670558][ T7650] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 81.692227][ T7651] syz.2.485: attempt to access beyond end of device [ 81.692227][ T7651] loop2: rw=0, sector=16, nr_sectors = 1 limit=0 [ 81.698610][ T7651] qnx6: unable to read the first superblock [ 81.701901][ T7651] syz.2.485: attempt to access beyond end of device [ 81.701901][ T7651] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 81.706775][ T7651] qnx6: unable to read the first superblock [ 81.708843][ T7651] qnx6: unable to read the first superblock [ 81.714070][ T7651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.485'. [ 81.771311][ T7658] binder: 7652:7658 ioctl c0306201 20000580 returned -14 [ 81.861070][ T7664] netlink: 52 bytes leftover after parsing attributes in process `syz.1.489'. [ 81.925901][ T7670] pim6reg1: entered promiscuous mode [ 81.927484][ T7670] pim6reg1: entered allmulticast mode [ 81.986540][ T39] kauditd_printk_skb: 3 callbacks suppressed [ 81.989020][ T39] audit: type=1400 audit(1732291014.873:519): avc: denied { mount } for pid=7669 comm="syz.1.491" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 81.996701][ T39] audit: type=1400 audit(1732291014.883:520): avc: denied { remount } for pid=7669 comm="syz.1.491" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 82.055881][ T39] audit: type=1400 audit(1732291014.943:521): avc: denied { unmount } for pid=5948 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 82.079930][ T35] IPVS: starting estimator thread 0... [ 82.166741][ T7687] IPVS: using max 22 ests per chain, 52800 per kthread [ 82.176734][ T5950] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 82.176772][ T5958] Bluetooth: hci0: command 0x1407 tx timeout [ 82.180748][ T5950] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 82.183524][ T7648] [ 82.184358][ T7648] ============================================ [ 82.186104][ T7648] WARNING: possible recursive locking detected [ 82.187735][ T7648] 6.12.0-syzkaller-07749-g28eb75e178d3 #0 Not tainted [ 82.190562][ T7648] -------------------------------------------- [ 82.192893][ T7648] syz.2.485/7648 is trying to acquire lock: [ 82.194894][ T7648] ffff8880342d4078 (&hdev->lock){+.+.}-{4:4}, at: mgmt_set_connectable_complete+0x143/0x330 [ 82.198494][ T7648] [ 82.198494][ T7648] but task is already holding lock: [ 82.201106][ T7648] ffff8880342d4078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ab/0x11a0 [ 82.204316][ T7648] [ 82.204316][ T7648] other info that might help us debug this: [ 82.207050][ T7648] Possible unsafe locking scenario: [ 82.207050][ T7648] [ 82.209665][ T7648] CPU0 [ 82.210636][ T7648] ---- [ 82.211511][ T7648] lock(&hdev->lock); [ 82.212625][ T7648] lock(&hdev->lock); [ 82.213727][ T7648] [ 82.213727][ T7648] *** DEADLOCK *** [ 82.213727][ T7648] [ 82.215814][ T7648] May be due to missing lock nesting notation [ 82.215814][ T7648] [ 82.218523][ T7648] 3 locks held by syz.2.485/7648: [ 82.220291][ T7648] #0: ffff8880342d4d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 82.223636][ T7648] #1: ffff8880342d4078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ab/0x11a0 [ 82.226968][ T7648] #2: ffff8880342d4690 (&hdev->cmd_sync_work_lock){+.+.}-{4:4}, at: hci_cmd_sync_dequeue+0x50/0x1f0 [ 82.230788][ T7648] [ 82.230788][ T7648] stack backtrace: [ 82.232825][ T7648] CPU: 1 UID: 0 PID: 7648 Comm: syz.2.485 Not tainted 6.12.0-syzkaller-07749-g28eb75e178d3 #0 [ 82.235719][ T7648] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 82.239398][ T7648] Call Trace: [ 82.240377][ T7648] [ 82.241175][ T7648] dump_stack_lvl+0x116/0x1f0 [ 82.242442][ T7648] print_deadlock_bug+0x2e3/0x410 [ 82.244212][ T7648] __lock_acquire+0x2117/0x3c40 [ 82.245592][ T7648] ? __pfx___lock_acquire+0x10/0x10 [ 82.247355][ T7648] ? lockdep_unlock+0x11a/0x290 [ 82.249104][ T7648] ? __lock_acquire+0x2077/0x3c40 [ 82.250875][ T7648] lock_acquire.part.0+0x11b/0x380 [ 82.252667][ T7648] ? mgmt_set_connectable_complete+0x143/0x330 [ 82.254800][ T7648] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 82.256414][ T7648] ? rcu_is_watching+0x12/0xc0 [ 82.257708][ T7648] ? trace_lock_acquire+0x14a/0x1d0 [ 82.259127][ T7648] ? mgmt_set_connectable_complete+0x143/0x330 [ 82.260903][ T7648] ? lock_acquire+0x2f/0xb0 [ 82.262125][ T7648] ? mgmt_set_connectable_complete+0x143/0x330 [ 82.263740][ T7648] __mutex_lock+0x19b/0xa60 [ 82.265053][ T7648] ? mgmt_set_connectable_complete+0x143/0x330 [ 82.266679][ T7648] ? __mutex_trylock_common+0xea/0x250 [ 82.268145][ T7648] ? mgmt_set_connectable_complete+0x143/0x330 [ 82.270218][ T7648] ? __pfx___mutex_trylock_common+0x10/0x10 [ 82.272313][ T7648] ? __pfx___mutex_lock+0x10/0x10 [ 82.274111][ T7648] ? __mutex_lock+0x1cc/0xa60 [ 82.275783][ T7648] ? hci_cmd_sync_dequeue+0x50/0x1f0 [ 82.277230][ T7648] ? mgmt_set_connectable_complete+0x143/0x330 [ 82.278852][ T7648] mgmt_set_connectable_complete+0x143/0x330 [ 82.280479][ T7648] ? __pfx_mgmt_set_connectable_complete+0x10/0x10 [ 82.282405][ T7648] ? __pfx_mgmt_set_connectable_complete+0x10/0x10 [ 82.284176][ T7648] _hci_cmd_sync_cancel_entry.constprop.0+0x6c/0x1d0 [ 82.285962][ T7648] hci_cmd_sync_dequeue+0x178/0x1f0 [ 82.287446][ T7648] cmd_complete_rsp+0x46/0x1e0 [ 82.288765][ T7648] mgmt_pending_foreach+0xdf/0x140 [ 82.290172][ T7648] ? __pfx_cmd_complete_rsp+0x10/0x10 [ 82.291684][ T7648] __mgmt_power_off+0x12a/0x2c0 [ 82.293050][ T7648] ? __pfx___mgmt_power_off+0x10/0x10 [ 82.294462][ T7648] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 82.296101][ T7648] ? lockdep_hardirqs_on+0x7c/0x110 [ 82.297578][ T7648] ? 0xffffffff81000000 [ 82.298844][ T7648] hci_dev_close_sync+0xcbb/0x11a0 [ 82.300592][ T7648] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 82.302441][ T7648] hci_dev_do_close+0x2e/0x90 [ 82.304089][ T7648] hci_dev_close+0x183/0x1e0 [ 82.305346][ T7648] hci_sock_ioctl+0x28c/0x880 [ 82.306601][ T7648] ? __pfx_hci_sock_ioctl+0x10/0x10 [ 82.308132][ T7648] sock_do_ioctl+0x116/0x280 [ 82.309362][ T7648] ? __pfx_sock_do_ioctl+0x10/0x10 [ 82.310776][ T7648] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 82.312560][ T7648] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 82.314294][ T7648] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 82.316304][ T7648] sock_ioctl+0x228/0x6c0 [ 82.317867][ T7648] ? __pfx_sock_ioctl+0x10/0x10 [ 82.319286][ T7648] ? selinux_file_ioctl+0x180/0x270 [ 82.320734][ T7648] ? selinux_file_ioctl+0xb4/0x270 [ 82.322093][ T7648] ? __pfx_sock_ioctl+0x10/0x10 [ 82.323484][ T7648] __x64_sys_ioctl+0x190/0x200 [ 82.324757][ T7648] do_syscall_64+0xcd/0x250 [ 82.325976][ T7648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.327624][ T7648] RIP: 0033:0x7fd072d7e819 [ 82.328805][ T7648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.335193][ T7648] RSP: 002b:00007fd073b7a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 82.338140][ T7648] RAX: ffffffffffffffda RBX: 00007fd072f35fa0 RCX: 00007fd072d7e819 [ 82.340740][ T7648] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 0000000000000006 [ 82.342929][ T7648] RBP: 00007fd072df175e R08: 0000000000000000 R09: 0000000000000000 [ 82.345125][ T7648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.347901][ T7648] R13: 0000000000000000 R14: 00007fd072f35fa0 R15: 00007ffeed797918 [ 82.350657][ T7648] [ 82.352378][ C1] hpet: Lost 9 RTC interrupts [ 84.256761][ T5958] Bluetooth: hci0: command 0x1407 tx timeout [ 86.336666][ T5958] Bluetooth: hci0: command 0x1407 tx timeout [ 88.426743][ T5958] Bluetooth: hci0: command 0x1407 tx timeout [ 90.496721][ T5958] Bluetooth: hci0: command 0x1407 tx timeout VM DIAGNOSIS: 15:56:55 Registers: info registers vcpu 0 CPU#0 RAX=0000000000091afc RBX=0000000000000000 RCX=ffffffff8b243179 RDX=ffffed100d4c7036 RSI=ffffffff8bd0dc00 RDI=ffffffff8164c9f9 RBP=fffffbfff1bd2f00 RSP=ffffffff8de07e20 R8 =0000000000000000 R9 =ffffed100d4c7035 R10=ffff88806a6381ab R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de97800 R14=ffffffff905f3650 R15=0000000000000000 RIP=ffffffff8b24455f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f5d77acbd58 CR3=000000002a0d6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd072df25fb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd072df2608 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd072df2602 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd072df2616 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd072df269c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd072df277a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fcacd371965df793 9c00a940721b906b 5c0f0f25d29d5b89 56fba8cc57cf1721 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d1ec0ed6fbd718dd 126424338ed2f9a8 42fad816f6620004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a940721b906b5c0f 0f25d29d5b8956fb a8cc57cf1721eb31 41aca452db524027 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000070 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff8505df15 RDI=ffffffff9aafbe40 RBP=ffffffff9aafbe00 RSP=ffffc900054c7000 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=732d302e32312e36 R12=0000000000000000 R13=0000000000000005 R14=ffffffff8505deb0 R15=0000000000000000 RIP=ffffffff8505df3f RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fd073b7a6c0 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f5d77acaf98 CR3=000000002a0d6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5d76df25fb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5d76df2608 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5d76df2602 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5d76df2616 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5d76df269c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5d76df277a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5d76f0c488 00007f5d76f0c480 00007f5d76f0c478 00007f5d76f0c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5d77a6d100 00007f5d76f0c440 00007f5d76f00004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5d76f0c498 00007f5d76f0c490 00007f5d76f0c488 00007f5d76f0c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000e853c RBX=0000000000000002 RCX=ffffffff8b243179 RDX=ffffed100d507036 RSI=ffffffff8bd0dc00 RDI=ffffffff8164c9f9 RBP=ffffed1003bd9000 RSP=ffffc90000197e08 R8 =0000000000000000 R9 =ffffed100d507035 R10=ffff88806a8381ab R11=0000000000044f00 R12=0000000000000002 R13=ffff88801dec8000 R14=ffffffff905f3650 R15=0000000000000000 RIP=ffffffff8b24455f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f5d015b2d58 CR3=000000002a0d6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd072df25fb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd072df2608 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd072df2602 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd072df2616 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd072df269c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd072df277a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fcacd371965df793 9c00a940721b906b 5c0f0f25d29d5b89 56fba8cc57cf1721 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d1ec0ed6fbd718dd 126424338ed2f9a8 42fad816f6620004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a940721b906b5c0f 0f25d29d5b8956fb a8cc57cf1721eb31 41aca452db524027 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000070 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000070f6c RBX=0000000000000003 RCX=ffffffff8b243179 RDX=ffffed100d527036 RSI=ffffffff8bd0dc00 RDI=ffffffff8164c9f9 RBP=ffffed1003bd9488 RSP=ffffc900001a7e08 R8 =0000000000000000 R9 =ffffed100d527035 R10=ffff88806a9381ab R11=0000000000000000 R12=0000000000000003 R13=ffff88801deca440 R14=ffffffff905f3650 R15=0000000000000000 RIP=ffffffff8b24455f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f5d015b1f98 CR3=000000002a0d6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd072df25fb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd072df2608 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd072df2602 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd072df2616 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd072df269c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd072df277a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fcacd371965df793 9c00a940721b906b 5c0f0f25d29d5b89 56fba8cc57cf1721 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d1ec0ed6fbd718dd 126424338ed2f9a8 42fad816f6620004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a940721b906b5c0f 0f25d29d5b8956fb a8cc57cf1721eb31 41aca452db524027 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000070 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000